diff --git a/.github/workflows/_cherry-pick.yml b/.github/workflows/_cherry-pick.yml
index f1e28051a..62a81bd7a 100644
--- a/.github/workflows/_cherry-pick.yml
+++ b/.github/workflows/_cherry-pick.yml
@@ -75,7 +75,7 @@ jobs:
 
       - name: Generate GH App token
         if: ${{ !inputs.test_mode }}
-        uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
         id: app-token
         with:
           app-id: ${{ steps.get-kv-secrets.outputs.BW-GHAPP-ID }}
diff --git a/.github/workflows/workflow-linter.yml b/.github/workflows/workflow-linter.yml
index 306a0773d..cbedd248a 100644
--- a/.github/workflows/workflow-linter.yml
+++ b/.github/workflows/workflow-linter.yml
@@ -46,7 +46,7 @@ jobs:
       - name: Generate GH App token
         if: inputs.repository != ''
         id: app-token
-        uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
         with:
           app-id: ${{ steps.get-kv-secrets.outputs.BW-GHAPP-ID }}
           private-key: ${{ steps.get-kv-secrets.outputs.BW-GHAPP-KEY }}