diff --git a/.github/workflows/pr_mise_lock.yaml b/.github/workflows/pr_mise_lock.yaml
index c19a6c03..1ff77c43 100644
--- a/.github/workflows/pr_mise_lock.yaml
+++ b/.github/workflows/pr_mise_lock.yaml
@@ -29,7 +29,7 @@ jobs:
       # yamllint disable-line rule:line-length
       - name: Generate GitHub token
         # https://github.com/actions/create-github-app-token
-        uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
         id: generate-token
         if: "! github.event.pull_request.head.repo.fork"
         with:
diff --git a/.github/workflows/release_please.yml b/.github/workflows/release_please.yml
index 0bb9178e..550b4aff 100644
--- a/.github/workflows/release_please.yml
+++ b/.github/workflows/release_please.yml
@@ -14,7 +14,7 @@ jobs:
     steps:
       - name: Generate GitHub token
         # yamllint disable-line rule:line-length
-        uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
         # https://github.com/actions/create-github-app-token
         id: generate-token
         with: