diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index a5335b9..faba57b 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Get GITHUB_TOKEN for release
-        uses: actions/create-github-app-token@v1
+        uses: actions/create-github-app-token@31c86eb3b33c9b601a1f60f98dcbfd1d70f379b4 # v1
         id: app-token
         with:
           app-id: ${{ secrets.release_gh_app_id }}