diff --git a/.github/workflows/update-bootstrap-tools.yml b/.github/workflows/update-bootstrap-tools.yml
index 03b82ae1..ff5f0b2d 100644
--- a/.github/workflows/update-bootstrap-tools.yml
+++ b/.github/workflows/update-bootstrap-tools.yml
@@ -47,7 +47,7 @@ jobs:
           echo "::set-output name=YAJSV::$YAJSV_LATEST_VERSION"
         id: latest-versions
 
-      - uses: tibdex/github-app-token@32691ba7c9e7063bd457bd8f2a5703138591fa58 # v1.9.0
+      - uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0
         id: generate-token
         with:
           app_id: ${{ secrets.TOKEN_APP_ID }}
diff --git a/.github/workflows/update-syft-release.yml b/.github/workflows/update-syft-release.yml
index e2442e2f..a12839f7 100644
--- a/.github/workflows/update-syft-release.yml
+++ b/.github/workflows/update-syft-release.yml
@@ -33,7 +33,7 @@ jobs:
           echo "::set-output name=LATEST_VERSION::$LATEST_VERSION"
         id: latest-version
 
-      - uses: tibdex/github-app-token@32691ba7c9e7063bd457bd8f2a5703138591fa58 # v1.9.0
+      - uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0
         id: generate-token
         with:
           app_id: ${{ secrets.TOKEN_APP_ID }}