diff --git a/hack/tools.mk b/hack/tools.mk
index c80584b..2f32aae 100644
--- a/hack/tools.mk
+++ b/hack/tools.mk
@@ -12,7 +12,7 @@ GOSEC                      := $(TOOLS_BIN_DIR)/gosec
 
 # default tool versions
 # renovate: datasource=github-releases depName=securego/gosec
-GOSEC_VERSION ?= v2.21.4
+GOSEC_VERSION ?= v2.22.0
 
 # tool versions from go.mod
 CONTROLLER_GEN_VERSION ?= $(call version_gomod,sigs.k8s.io/controller-tools)