diff --git a/.github/workflows/pr-preview.yml b/.github/workflows/pr-preview.yml
index 396fbf0653b2..04486282e6d9 100644
--- a/.github/workflows/pr-preview.yml
+++ b/.github/workflows/pr-preview.yml
@@ -14,7 +14,7 @@ jobs:
     if: ${{ !github.event.pull_request.head.repo.fork && github.triggering_actor != 'dependabot[bot]' }}
     steps:
       - name: Create app token
-        uses: actions/create-github-app-token@v3
+        uses: actions/create-github-app-token@v3.1.1
         id: app-token
         with:
           client-id: ${{ vars.THEOPLAYER_BOT_CLIENT_ID }}
diff --git a/.github/workflows/theoplayer-release.yml b/.github/workflows/theoplayer-release.yml
index 66542649f631..b01d6a48e452 100644
--- a/.github/workflows/theoplayer-release.yml
+++ b/.github/workflows/theoplayer-release.yml
@@ -8,7 +8,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Create app token
-        uses: actions/create-github-app-token@v3
+        uses: actions/create-github-app-token@v3.1.1
         id: app-token
         with:
           client-id: ${{ vars.THEOPLAYER_BOT_CLIENT_ID }}
diff --git a/.github/workflows/update-submodules.yml b/.github/workflows/update-submodules.yml
index 8ca0c2df6136..c6c260a601c8 100644
--- a/.github/workflows/update-submodules.yml
+++ b/.github/workflows/update-submodules.yml
@@ -17,7 +17,7 @@ jobs:
       UPDATE_BRANCH: update-submodules
     steps:
       - name: Create app token
-        uses: actions/create-github-app-token@v3
+        uses: actions/create-github-app-token@v3.1.1
         id: app-token
         with:
           client-id: ${{ vars.THEOPLAYER_BOT_CLIENT_ID }}
diff --git a/.github/workflows/update-theolive-changelog.yml b/.github/workflows/update-theolive-changelog.yml
index b449ab7bb9b4..8ae838e80b90 100644
--- a/.github/workflows/update-theolive-changelog.yml
+++ b/.github/workflows/update-theolive-changelog.yml
@@ -16,7 +16,7 @@ jobs:
       UPDATE_BRANCH: update-theolive-changelog
     steps:
       - name: Create app token
-        uses: actions/create-github-app-token@v3
+        uses: actions/create-github-app-token@v3.1.1
         id: app-token
         with:
           client-id: ${{ vars.THEOPLAYER_BOT_CLIENT_ID }}