diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 0d48a5a8..9d7e23b6 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -32,7 +32,7 @@ jobs:
     steps:
       - name: Harden runner egress
         # step-security/harden-runner v2.19.0
-        uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450
+        uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99
         with:
           egress-policy: audit