diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index ab04cb6d..ad1a7d5d 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -4188,7 +4188,7 @@ jobs:
       - name: 🌈 Scan vulnerable fixture (expected to fail)
         id: scan
         continue-on-error: true
-        uses: zizmorcore/zizmor-action@53290badfa369cb0bf7ad16342cb62c2fa47ac7b # v0.8.0
+        uses: zizmorcore/zizmor-action@45d7276c9ca790aabd705e31ca99c6185c3e76dd # v0.8.1
         with:
           inputs: .github/tests/zizmor-fixture/template-injection.yml
           advanced-security: false
diff --git a/.github/workflows/scan-for-workflow-vulnerabilities.yaml b/.github/workflows/scan-for-workflow-vulnerabilities.yaml
index 38ebc648..42217216 100644
--- a/.github/workflows/scan-for-workflow-vulnerabilities.yaml
+++ b/.github/workflows/scan-for-workflow-vulnerabilities.yaml
@@ -67,6 +67,6 @@ jobs:
           fi
 
       - name: 🌈 Zizmor
-        uses: zizmorcore/zizmor-action@53290badfa369cb0bf7ad16342cb62c2fa47ac7b # v0.8.0
+        uses: zizmorcore/zizmor-action@45d7276c9ca790aabd705e31ca99c6185c3e76dd # v0.8.1
         with:
           config: ${{ steps.config.outputs.exists == 'true' && 'zizmor.yml' || '' }}