diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 4ee496f..c4bab0a 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -32,7 +32,7 @@ jobs:
     permissions:
       contents: read
     container:
-      image: semgrep/semgrep@sha256:b94b53d02fd4a022f9eac4e2af1380f5c3c4c21400e79d3336bdff1d1db5e796
+      image: semgrep/semgrep@sha256:51c9f53a4fce0d55e9abd08d7b96968654248a4b1122e77f20e0a49c0072446c
     # Skip Renovate PRs: no token available there.
     if: github.actor != 'dependabot[bot]' && github.actor != 'renovate[bot]'
     steps: