diff --git a/.github/workflows/fetch.yaml b/.github/workflows/fetch.yaml
index 17de18ce..8ddd68e8 100644
--- a/.github/workflows/fetch.yaml
+++ b/.github/workflows/fetch.yaml
@@ -15,7 +15,7 @@ jobs:
     steps:
       - name: Generate token
         id: generate_token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         with:
           app-id: 295926
           private-key: ${{ secrets.TOKEN_EXCHANGE_GH_APP_PRIVATE_KEY }}
@@ -55,7 +55,7 @@ jobs:
           committer: ${{ steps.generate_token.outputs.app-slug }}[bot] <${{ steps.generate_token.outputs.app-slug }}[bot]@users.noreply.github.com>
       - name: Generate Github Token
         id: generate_issues_token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         if: ${{ failure() }}
         with:
           app-id: ${{ secrets.BUFBUILD_ISSUE_CREATOR_APP_ID }}
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 138963c2..3db78322 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -35,7 +35,7 @@ jobs:
         run: go run ./cmd/release .
       - name: Generate Github Token
         id: generate_issues_token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         if: ${{ failure() }}
         with:
           app_id: ${{ secrets.BUFBUILD_ISSUE_CREATOR_APP_ID }}