diff --git a/.github/workflows/ai-security-audit.yml b/.github/workflows/ai-security-audit.yml
index a560e15..63db0f2 100644
--- a/.github/workflows/ai-security-audit.yml
+++ b/.github/workflows/ai-security-audit.yml
@@ -245,7 +245,7 @@ jobs:
 
       - name: Run AI audit (full repo context)
         id: codex
-        uses: openai/codex-action@086169432f1d2ab2f4057540b1754d550f6a1189 # v1.4
+        uses: openai/codex-action@5c3f4ccdb2b8790f73d6b21751ac00e602aa0c02 # v1.7
         with:
           openai-api-key: ${{ env.OPENAI_API_KEY }}
           prompt-file: ${{ steps.mode.outputs.prompt_file }}