diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index 7c7d1da..ab908af 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -29,6 +29,6 @@ jobs:
 
       # The pin also fixes the zizmor version, so Dependabot updates both together
       - name: Run zizmor
-        uses: zizmorcore/zizmor-action@85b2b9fb8e3325e7a23d7d0a9d7ba5ae0f999e3e # v0.7.1
+        uses: zizmorcore/zizmor-action@45d7276c9ca790aabd705e31ca99c6185c3e76dd # v0.8.1
         with:
           advanced-security: false  # print findings and fail the job; the Security tab upload needs write access