diff --git a/.github/workflows/helm-release.yml b/.github/workflows/helm-release.yml
index 7df393ee38af..9eb7c2b82948 100644
--- a/.github/workflows/helm-release.yml
+++ b/.github/workflows/helm-release.yml
@@ -80,7 +80,7 @@ jobs:
             ALLOYBOT_PRIVATE_KEY=alloybot:private_key
           export_env: false
 
-      - uses: actions/create-github-app-token@d72941d797fd3113feb6b93fd0dec494b13a2547 # v1.12.0
+      - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
         id: app-token
         with:
           app-id: ${{ fromJSON(steps.get-secrets.outputs.secrets).ALLOYBOT_APP_ID }}