diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index ae2aaf5..4d71de9 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -17,7 +17,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: zizmorcore/zizmor-action@3dc1ecc9bcb9e94e9b2c709687979e1298497054 # v0.6.2
+      - uses: zizmorcore/zizmor-action@70fb788f84895a7701f5643d103d587e460b5c99 # v0.6.3
         with:
           # Fork PRs get a read-only GITHUB_TOKEN, so SARIF upload would fail -
           # disable Advanced Security upload and fall back to annotations there