diff --git a/.github/workflows/on-push-main.yml b/.github/workflows/on-push-main.yml
index 1f96722..ea7fe89 100644
--- a/.github/workflows/on-push-main.yml
+++ b/.github/workflows/on-push-main.yml
@@ -11,7 +11,7 @@ jobs:
   tagpr:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/create-github-app-token@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5 # v2.0.2
+      - uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2.2.1
         id: app-token
         with:
           app-id: 364898
diff --git a/.github/workflows/wf-release-binary.yml b/.github/workflows/wf-release-binary.yml
index 3c33c60..513341e 100644
--- a/.github/workflows/wf-release-binary.yml
+++ b/.github/workflows/wf-release-binary.yml
@@ -14,7 +14,7 @@ jobs:
         with:
           go-version: stable
       - id: github_token
-        uses: actions/create-github-app-token@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5 # v2.0.2
+        uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2.2.1
         with:
           app-id: 364898
           private-key: ${{ secrets.ARTHUR1_BOT_PRIVATE_KEY }}