diff --git a/.github/actions/lint-workflows/action.yml b/.github/actions/lint-workflows/action.yml
index 48a478a..5d42fae 100644
--- a/.github/actions/lint-workflows/action.yml
+++ b/.github/actions/lint-workflows/action.yml
@@ -45,7 +45,7 @@ runs:
     # Note that `continue-on-error` is silently ignored on composite action
     # steps, so any zizmor finding fails the calling job. Suppress findings
     # that don't apply via `.github/zizmor.yml` or `# zizmor: ignore` comments.
-    - uses: zizmorcore/zizmor-action@3dc1ecc9bcb9e94e9b2c709687979e1298497054 # v0.6.2
+    - uses: zizmorcore/zizmor-action@cc914d7f3750a2d13d75c7f184a1060aa0e9d482 # v0.6.4
       with:
         config: ${{ inputs.zizmor-config }}
         # Mutually exclusive with `annotations`; the Security tab needs