diff --git a/.github/workflows/socket-basics.yml b/.github/workflows/socket-basics.yml
index a19fb451d..5ddf328a3 100644
--- a/.github/workflows/socket-basics.yml
+++ b/.github/workflows/socket-basics.yml
@@ -7,9 +7,10 @@ on:
 jobs:
   socket-basics-security-scan:
     # We intentionally run this shared action from @main, not from a pinned sha
-    # this is because we control the shared-actions repo, so there is not a significant risk of malicious changes being pushed.
+    # this is because we control the ynab-sast-scanner repo, so there is not a significant risk of malicious changes being pushed.
     # Plus, the shared action does use pinned dependencies, and so will be updated fairly often.  When we do that, we do not
     # want to have to update the sha in every repo that uses this shared action, before such updates apply.
-    uses: ynab/shared-actions/.github/workflows/socket-basics.yml@main
+    uses: ynab/ynab-sast-scanner/.github/workflows/socket-basics.yml@main
     secrets:
       SOCKET_SECURITY_API_KEY: ${{ secrets.SOCKET_SECURITY_API_KEY }}
+      SAST_SUPPRESSIONS_APP_PRIVATE_KEY: ${{ secrets.SAST_SUPPRESSIONS_APP_PRIVATE_KEY }}