diff --git a/.github/workflows/quality.yml b/.github/workflows/quality.yml
index 2930c53..0a6d234 100644
--- a/.github/workflows/quality.yml
+++ b/.github/workflows/quality.yml
@@ -104,7 +104,7 @@ jobs:
           persist-credentials: false
       # Repo moved from woodruffw/* to zizmorcore/* in early 2026; the old
       # location returns 404 ("Unable to resolve action"). Same v0.4.0 tag.
-      - uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa # v0.5.7
+      - uses: zizmorcore/zizmor-action@6fc4b006235f201fdab3722e17240ab420d580e5 # v0.6.1
         with:
           persona: auditor