diff --git a/.github/workflows/bandit.yml b/.github/workflows/bandit.yml
index 529bbde..a3639f2 100644
--- a/.github/workflows/bandit.yml
+++ b/.github/workflows/bandit.yml
@@ -33,7 +33,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Bandit Scan
-        uses: reactive-firewall/python-bandit-scan@c56ff8d84b6e111989d803bbd884a7969363332c # v2.3
+        uses: reactive-firewall/python-bandit-scan@f5cf2ce05269c19fafe24b0c91e8087c6c187385 # v2.4
         with:  # optional arguments
           # exit with 0, even with results found
           exit_zero: true  # optional, default is DEFAULT