diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 19ab26d531..4d7fc273c7 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -1218,7 +1218,7 @@ jobs:
       pull-requests: write
     steps:
       - name: 🔑 Generate GitHub App Token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         id: generate-token
         with:
           client-id: ${{ vars.APP_CLIENT_ID }}
diff --git a/.github/workflows/update-hetzner-talos-iso.yaml b/.github/workflows/update-hetzner-talos-iso.yaml
index a38ec0fde0..6c8a69df89 100644
--- a/.github/workflows/update-hetzner-talos-iso.yaml
+++ b/.github/workflows/update-hetzner-talos-iso.yaml
@@ -26,7 +26,7 @@ jobs:
       contents: read
     steps:
       - name: 🔑 Generate GitHub App Token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         id: generate-token
         with:
           client-id: ${{ vars.APP_CLIENT_ID }}