diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index d92f86ca..61c058bc 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -23,7 +23,7 @@ jobs:
       with:
         persist-credentials: false
     - name: Install uv
-      uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
+      uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
     - name: Run zizmor
       # Findings are reported as annotations on the offending workflow lines
       # and fail the job.