diff --git a/.github/actions/1password-secret-sync/action.yml b/.github/actions/1password-secret-sync/action.yml
index 4c3b427..6b1701d 100644
--- a/.github/actions/1password-secret-sync/action.yml
+++ b/.github/actions/1password-secret-sync/action.yml
@@ -37,7 +37,7 @@ runs:
   steps:
     - name: Install 1Password CLI
       # Pin to commit SHA for supply chain security — update when action changes
-      uses: 1password/install-cli-action@9a0c9dd934086b7ab1d90115d455bda1c53c2bdb # v2.0.2
+      uses: 1password/install-cli-action@8d006a0d0a4fd505af7f7ce589e7f768385ff5e4 # v3
 
     - name: Sync secrets
       id: sync