diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml
index a2e39a6a..d2dba897 100644
--- a/.github/workflows/security-scan.yml
+++ b/.github/workflows/security-scan.yml
@@ -369,7 +369,7 @@ jobs:
 
       - name: TruffleHog scan
         id: trufflehog
-        uses: trufflesecurity/trufflehog@e76dff8a7e57d6df0c60ad8cbf5d5cba505a8fc9  # v3.99.2
+        uses: trufflesecurity/trufflehog@31ce31ee1abbcc7dc8eee5764c17121c3044c8b2  # v3.99.7
         with:
           path: ./
           base: ${{ github.event.pull_request.base.sha || '' }}
diff --git a/.github/workflows/validate-secrets.yml b/.github/workflows/validate-secrets.yml
index ce31af87..e92d7c44 100644
--- a/.github/workflows/validate-secrets.yml
+++ b/.github/workflows/validate-secrets.yml
@@ -311,7 +311,7 @@ jobs:
           fetch-depth: 0
 
       - name: TruffleHog OSS
-        uses: trufflesecurity/trufflehog@e76dff8a7e57d6df0c60ad8cbf5d5cba505a8fc9  # v3.99.2
+        uses: trufflesecurity/trufflehog@31ce31ee1abbcc7dc8eee5764c17121c3044c8b2  # v3.99.7
         with:
           path: ./
           base: ${{ github.event.repository.default_branch }}