diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 26c2ac8ae..54e9fc3e1 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -20,7 +20,7 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2
+        uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2
         with:
           egress-policy: audit