diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index ae2aaf5..07814fe 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -17,7 +17,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: zizmorcore/zizmor-action@3dc1ecc9bcb9e94e9b2c709687979e1298497054 # v0.6.2
+      - uses: zizmorcore/zizmor-action@cc914d7f3750a2d13d75c7f184a1060aa0e9d482 # v0.6.4
         with:
           # Fork PRs get a read-only GITHUB_TOKEN, so SARIF upload would fail -
           # disable Advanced Security upload and fall back to annotations there