diff --git a/.github/workflows/asf-allowlist-check.yml b/.github/workflows/asf-allowlist-check.yml
index c63160d3..9fd42467 100644
--- a/.github/workflows/asf-allowlist-check.yml
+++ b/.github/workflows/asf-allowlist-check.yml
@@ -31,4 +31,4 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         with:
           persist-credentials: false
-      - uses: apache/infrastructure-actions/allowlist-check@4e9c961f587f72b170874b6f5cd4ac15f7f26eb8  # main # zizmor: ignore[ref-version-mismatch] tracks infrastructure-actions main; monorepo has no per-action version tags
+      - uses: apache/infrastructure-actions/allowlist-check@bc817c8e9ad7d8216aab74223e32ea391e233b2c  # main # zizmor: ignore[ref-version-mismatch] tracks infrastructure-actions main; monorepo has no per-action version tags