diff --git a/.github/workflows/fallow.yml b/.github/workflows/fallow.yml
index e18ade9..75d579e 100644
--- a/.github/workflows/fallow.yml
+++ b/.github/workflows/fallow.yml
@@ -26,14 +26,14 @@ jobs:
           fetch-depth: 0
       - name: Run Fallow on changed files
         if: github.event_name != 'workflow_dispatch'
-        uses: fallow-rs/fallow@66ae724873c3002fe4c81d20d4a30ecb78139802 # v3.15.0
+        uses: fallow-rs/fallow@45fd28766199acb1f939f6862274a37aad12770b # v3.16.0
         with:
           root: ${{ inputs.root }}
           format: sarif
           changed-since: ${{ github.event_name == 'pull_request' && github.event.pull_request.base.sha || github.event.before }}
       - name: Run Fallow full scan
         if: github.event_name == 'workflow_dispatch'
-        uses: fallow-rs/fallow@66ae724873c3002fe4c81d20d4a30ecb78139802 # v3.15.0
+        uses: fallow-rs/fallow@45fd28766199acb1f939f6862274a37aad12770b # v3.16.0
         with:
           root: ${{ inputs.root }}
           format: sarif