diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index e32ab86..3a250db 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -24,7 +24,7 @@ jobs:
       - uses: actions/checkout@v7
         with:
           persist-credentials: false
-      - uses: ossf/scorecard-action@v2.4.3
+      - uses: ossf/scorecard-action@v2.4.4
         with:
           results_file: scorecard-results.sarif
           results_format: sarif
diff --git a/test/security-workflow.test.ts b/test/security-workflow.test.ts
index 95b84aa..89eb35b 100644
--- a/test/security-workflow.test.ts
+++ b/test/security-workflow.test.ts
@@ -45,7 +45,7 @@ describe("security and reusable workflows", () => {
     });
     expect(workflow.jobs.scorecard["runs-on"]).toBe("ubuntu-latest");
     expect(String(JSON.stringify(workflow))).toContain(
-      "ossf/scorecard-action@v2.4.3"
+      "ossf/scorecard-action@v2.4.4"
     );
     expect(String(JSON.stringify(workflow))).toContain("publish_results");
   });