diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
index 0cc12e1e..0be20921 100644
--- a/.github/workflows/semgrep.yml
+++ b/.github/workflows/semgrep.yml
@@ -12,7 +12,7 @@ on:
 jobs:
   semgrep:
     name: Scan
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04
     container:
       image: returntocorp/semgrep
     if: (github.actor != 'dependabot[bot]')