diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index 7c7d1da..58fbf2b 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -29,6 +29,6 @@ jobs:
 
       # The pin also fixes the zizmor version, so Dependabot updates both together
       - name: Run zizmor
-        uses: zizmorcore/zizmor-action@85b2b9fb8e3325e7a23d7d0a9d7ba5ae0f999e3e # v0.7.1
+        uses: zizmorcore/zizmor-action@53290badfa369cb0bf7ad16342cb62c2fa47ac7b # v0.8.0
         with:
           advanced-security: false  # print findings and fail the job; the Security tab upload needs write access