diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index c225f6ef80902de48884bb73a1265fbc8b07741a..b2a0ba7a47c75a2a79bb5d0c7e4b16c2056d8954 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -20,7 +20,7 @@ jobs:
 
     steps:
       - name: 'Checkout code'
-        uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # v3.1.0
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
         with:
           persist-credentials: false