Update TruffleHog version in workflow

Author: akarnokd

.github/workflows/entropy-beauty-scan.yml

@@ -37,7 +37,7 @@ jobs:
           # No extra packages needed — compute-entropy.py uses only stdlib
 
       - name: Run TruffleHog
-        uses: trufflesecurity/trufflehog@f446421baf832d6356c42c1743d99abff52ff334 # main (as of March 2026)
+        uses: trufflesecurity/trufflehog@f446421baf832d6356c42c1743d99abff52ff334 # v3.95.7
         with:
           path: .
           extra_args: --results=verified,unknown --filter-entropy=3.5 --json