diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index d6e093c16200d..28301fade8856 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -17,7 +17,7 @@ permissions: read-all
 jobs:
   analysis:
     name: Scorecard analysis
-    uses: nodejs/web-team/.github/workflows/scorecard.yml@9f3c83af227d721768d9dbb63009a47ed4f4282f
+    uses: nodejs/web-team/.github/workflows/scorecard.yml@64d15ba684371b26784aa58680ea3f31120213ba
     permissions:
       # Needed to upload the results to code-scanning dashboard.
       security-events: write