diff --git a/.github/workflows/vortex-test-common.yml b/.github/workflows/vortex-test-common.yml
index c42949756..1324e2b8d 100644
--- a/.github/workflows/vortex-test-common.yml
+++ b/.github/workflows/vortex-test-common.yml
@@ -277,7 +277,7 @@ jobs:
         continue-on-error: ${{ vars.VORTEX_CI_ACTIONLINT_IGNORE_FAILURE == '1' }}
 
       - name: Check GitHub Actions security with Zizmor
-        uses: zizmorcore/zizmor-action@70fb788f84895a7701f5643d103d587e460b5c99 # v0.6.3
+        uses: zizmorcore/zizmor-action@cc914d7f3750a2d13d75c7f184a1060aa0e9d482 # v0.6.4
         with:
           # Audit only the real workflows. The default '.' also descends into the
           # installer test fixtures, whose normalized '__HASH__' action refs are