diff --git a/.github/workflows/updatecli.yaml b/.github/workflows/updatecli.yaml
index 464a119..7934b37 100644
--- a/.github/workflows/updatecli.yaml
+++ b/.github/workflows/updatecli.yaml
@@ -18,7 +18,7 @@ jobs:
         uses: "updatecli/updatecli-action@41b9c8d707830a9daebaeaa84c1b62d60b779564" # v3.6.0
       - name: "Setup zizmor"
         env:
-          ZIZMOR_VERSION: "1.29.0"
+          ZIZMOR_VERSION: "1.30.1"
           # Used by "gh attestation verify" to fetch zizmor build provenance.
           GH_TOKEN: ${{ github.token }}
         run: |
diff --git a/.github/workflows/updatecli_test.yaml b/.github/workflows/updatecli_test.yaml
index d06b0ab..94edabe 100644
--- a/.github/workflows/updatecli_test.yaml
+++ b/.github/workflows/updatecli_test.yaml
@@ -16,7 +16,7 @@ jobs:
         uses: "updatecli/updatecli-action@41b9c8d707830a9daebaeaa84c1b62d60b779564" # v3.6.0
       - name: "Setup zizmor"
         env:
-          ZIZMOR_VERSION: "1.29.0"
+          ZIZMOR_VERSION: "1.30.1"
           # Used by "gh attestation verify" to fetch zizmor build provenance.
           GH_TOKEN: ${{ github.token }}
         run: |
diff --git a/.github/workflows/updatecli_update.yaml b/.github/workflows/updatecli_update.yaml
index b79e112..cb0eca9 100644
--- a/.github/workflows/updatecli_update.yaml
+++ b/.github/workflows/updatecli_update.yaml
@@ -30,7 +30,7 @@ jobs:
         uses: "updatecli/updatecli-action@41b9c8d707830a9daebaeaa84c1b62d60b779564" # v3.6.0
       - name: "Setup zizmor"
         env:
-          ZIZMOR_VERSION: "1.29.0"
+          ZIZMOR_VERSION: "1.30.1"
           # Used by "gh attestation verify" to fetch zizmor build provenance.
           GH_TOKEN: ${{ github.token }}
         run: |