diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index e45207b..2feb5e8 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -27,7 +27,7 @@ jobs:
       with:
         fetch-depth: 0
     - name: TruffleHog OSS
-      uses: trufflesecurity/trufflehog@v3.16.4
+      uses: trufflesecurity/trufflehog@v3.60.1
       with:
         path: ./
         base: ${{ github.event.repository.default_branch }}
diff --git a/CHANGELOG.md b/CHANGELOG.md
index b64a172..5763a47 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -12,6 +12,8 @@
 
 **Internal**
 
+- Bump trufflesecurity/trufflehog from 3.16.4 to 3.60.1. ([#343](https://github.com/getsentry/vroom/pull/343))
+
 - Move FixSamplesTime call to speedscope and calltrees methods([#339](https://github.com/getsentry/vroom/pull/339))
 
 ## 23.10.0