diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
index 078302ed..3e33b1d4 100644
--- a/.github/workflows/renovate.yml
+++ b/.github/workflows/renovate.yml
@@ -28,7 +28,7 @@ jobs:
       - name: Generate a token with GitHub App if App ID exists
         id: generate-token
         if: vars.BOT_APP_ID
-        uses: actions/create-github-app-token@21cfef2b496dd8ef5b904c159339626a10ad380e # v1
+        uses: actions/create-github-app-token@d72941d797fd3113feb6b93fd0dec494b13a2547 # v1
         with:
           app-id: ${{ vars.BOT_APP_ID }}
           private-key: ${{ secrets.BOT_PRIVATE_KEY }}
diff --git a/.github/workflows/semantic-release.yml b/.github/workflows/semantic-release.yml
index fdf67f08..dcd49e12 100644
--- a/.github/workflows/semantic-release.yml
+++ b/.github/workflows/semantic-release.yml
@@ -24,7 +24,7 @@ jobs:
       - name: Generate a bot token with BOT_APP_ID
         id: bot_token
         if: vars.BOT_APP_ID && env.BOT_PRIVATE_KEY != null
-        uses: actions/create-github-app-token@21cfef2b496dd8ef5b904c159339626a10ad380e # v1
+        uses: actions/create-github-app-token@d72941d797fd3113feb6b93fd0dec494b13a2547 # v1
         env:
           BOT_PRIVATE_KEY: ${{ secrets.BOT_PRIVATE_KEY }}
         with:
diff --git a/template/[% if repo_platform == 'github' %].github[% endif %]/workflows/renovate.yml.jinja b/template/[% if repo_platform == 'github' %].github[% endif %]/workflows/renovate.yml.jinja
index 0a8ef6b8..bceefe6b 100644
--- a/template/[% if repo_platform == 'github' %].github[% endif %]/workflows/renovate.yml.jinja	
+++ b/template/[% if repo_platform == 'github' %].github[% endif %]/workflows/renovate.yml.jinja	
@@ -28,7 +28,7 @@ jobs:
       - name: Generate a token with GitHub App if App ID exists
         id: generate-token
         if: vars.BOT_APP_ID
-        uses: actions/create-github-app-token@21cfef2b496dd8ef5b904c159339626a10ad380e # v1
+        uses: actions/create-github-app-token@d72941d797fd3113feb6b93fd0dec494b13a2547 # v1
         with:
           app-id: {{ '${{ vars.BOT_APP_ID }}' }}
           private-key: {{ '${{ secrets.BOT_PRIVATE_KEY }}' }}
diff --git a/template/[% if repo_platform == 'github' %].github[% endif %]/workflows/semantic-release.yml.jinja b/template/[% if repo_platform == 'github' %].github[% endif %]/workflows/semantic-release.yml.jinja
index fcad6df6..65b39f2c 100644
--- a/template/[% if repo_platform == 'github' %].github[% endif %]/workflows/semantic-release.yml.jinja	
+++ b/template/[% if repo_platform == 'github' %].github[% endif %]/workflows/semantic-release.yml.jinja	
@@ -24,7 +24,7 @@ jobs:
       - name: Generate a bot token with BOT_APP_ID
         id: bot_token
         if: vars.BOT_APP_ID && env.BOT_PRIVATE_KEY != null
-        uses: actions/create-github-app-token@21cfef2b496dd8ef5b904c159339626a10ad380e # v1
+        uses: actions/create-github-app-token@d72941d797fd3113feb6b93fd0dec494b13a2547 # v1
         env:
           BOT_PRIVATE_KEY: {{ '${{ secrets.BOT_PRIVATE_KEY }}' }}
         with: