diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 3a250db..4d22c41 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -24,7 +24,7 @@ jobs:
       - uses: actions/checkout@v7
         with:
           persist-credentials: false
-      - uses: ossf/scorecard-action@v2.4.4
+      - uses: ossf/scorecard-action@v2.5.0
         with:
           results_file: scorecard-results.sarif
           results_format: sarif
diff --git a/test/security-workflow.test.ts b/test/security-workflow.test.ts
index 9457440..6c4a018 100644
--- a/test/security-workflow.test.ts
+++ b/test/security-workflow.test.ts
@@ -99,7 +99,7 @@ describe("security and reusable workflows", () => {
     });
     expect(workflow.jobs.scorecard["runs-on"]).toBe("ubuntu-latest");
     expect(String(JSON.stringify(workflow))).toContain(
-      "ossf/scorecard-action@v2.4.4"
+      "ossf/scorecard-action@v2.5.0"
     );
     expect(String(JSON.stringify(workflow))).toContain("publish_results");
   });