diff --git a/.github/workflows/vuln.yml b/.github/workflows/vuln.yml
old mode 100755
new mode 100644
index aa35f29..fbfd5d2
--- a/.github/workflows/vuln.yml
+++ b/.github/workflows/vuln.yml
@@ -51,7 +51,7 @@ jobs:
 
       # ── Secrets: gitleaks ──
       - name: Gitleaks (secrets)
-        uses: gitleaks/gitleaks-action@v2
+        uses: gitleaks/gitleaks-action@v3
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         continue-on-error: true