diff --git a/.github/workflows/first-time-contributor.yml b/.github/workflows/first-time-contributor.yml
index f825cd77dc05..9f17535f7e6b 100644
--- a/.github/workflows/first-time-contributor.yml
+++ b/.github/workflows/first-time-contributor.yml
@@ -72,7 +72,7 @@ jobs:
         id: scan
         # The welcome should still be posted if this advisory scan fails.
         continue-on-error: true
-        uses: MatteoGabriele/agentscan-action@98202262c925c508d4c1424b1dfbe17ee35b0c02  # v2.4.0
+        uses: MatteoGabriele/agentscan-action@8112fb79b33fafb8506159df20129a34209ac410  # v2.5.0
         with:
           github-token: ${{ github.token }}
           mode: silent