diff --git a/.github/workflows/trufflehog.yaml b/.github/workflows/trufflehog.yaml
index 7f6646e11..024702b60 100644
--- a/.github/workflows/trufflehog.yaml
+++ b/.github/workflows/trufflehog.yaml
@@ -15,6 +15,6 @@ jobs:
         with:
           fetch-depth: 0
       - name: Secret Scanning
-        uses: trufflesecurity/trufflehog@main
+        uses: trufflesecurity/trufflehog@853e1e8d249fd1e29d0fcc7280d29b03df3d643d
         with:
           extra_args: --results=verified,unknown