diff --git a/.github/scripts/hermetic_library_generation.sh b/.github/scripts/hermetic_library_generation.sh
deleted file mode 100644
index 49a7414cf..000000000
--- a/.github/scripts/hermetic_library_generation.sh
+++ /dev/null
@@ -1,116 +0,0 @@
-#!/bin/bash
-set -e
-# This script should be run at the root of the repository.
-# This script is used to, when a pull request changes the generation
-# configuration (generation_config.yaml by default):
-# 1. Find whether the last commit in this pull request contains changes to
-# the generation configuration and exit early if it doesn't have such a change
-# since the generation result would be the same.
-# 2. Compare generation configurations in the current branch (with which the
-# pull request associated) and target branch (into which the pull request is
-# merged);
-# 3. Generate changed libraries using library_generation image;
-# 4. Commit the changes to the pull request, if any.
-# 5. Edit the PR body with generated pull request description, if applicable.
-
-# The following commands need to be installed before running the script:
-# 1. git
-# 2. gh
-# 3. docker
-
-# The parameters of this script is:
-# 1. target_branch, the branch into which the pull request is merged.
-# 2. current_branch, the branch with which the pull request is associated.
-# 3. [optional] generation_config, the path to the generation configuration,
-# the default value is generation_config.yaml in the repository root.
-while [[ $# -gt 0 ]]; do
-key="$1"
-case "${key}" in
-  --target_branch)
-    target_branch="$2"
-    shift
-    ;;
-  --current_branch)
-    current_branch="$2"
-    shift
-    ;;
-  --generation_config)
-    generation_config="$2"
-    shift
-    ;;
-  *)
-    echo "Invalid option: [$1]"
-    exit 1
-    ;;
-esac
-shift
-done
-
-if [ -z "${target_branch}" ]; then
-  echo "missing required argument --target_branch"
-  exit 1
-fi
-
-if [ -z "${current_branch}" ]; then
-  echo "missing required argument --current_branch"
-  exit 1
-fi
-
-if [ -z "${generation_config}" ]; then
-  generation_config=generation_config.yaml
-  echo "Using default generation config: ${generation_config}"
-fi
-
-workspace_name="/workspace"
-baseline_generation_config="baseline_generation_config.yaml"
-message="chore: generate libraries at $(date)"
-
-git checkout "${target_branch}"
-git checkout "${current_branch}"
-
-# copy generation configuration from target branch to current branch.
-git show "${target_branch}":"${generation_config}" > "${baseline_generation_config}"
-
-# parse image tag from the generation configuration.
-image_tag=$(grep "gapic_generator_version" "${generation_config}" | cut -d ':' -f 2 | xargs)
-
-repo_root_dir=$(pwd)
-mkdir -p "${repo_root_dir}/output"
-# download api definitions from googleapis repository
-googleapis_commitish=$(grep googleapis_commitish "${generation_config}" | cut -d ":" -f 2 | xargs)
-api_def_dir=$(mktemp -d)
-git clone https://github.com/googleapis/googleapis.git "${api_def_dir}"
-pushd "${api_def_dir}"
-git checkout "${googleapis_commitish}"
-cp -r google/ grafeas/ "${repo_root_dir}/output"
-popd
-
-# run hermetic code generation docker image.
-docker run \
-  --rm \
-  -u "$(id -u):$(id -g)" \
-  -v "$(pwd):${workspace_name}" \
-  gcr.io/cloud-devrel-public-resources/java-library-generation:"${image_tag}" \
-  --baseline-generation-config-path="${workspace_name}/${baseline_generation_config}" \
-  --current-generation-config-path="${workspace_name}/${generation_config}"
-
-# remove api definitions after generation
-rm -rf "${api_def_dir}"
-
-# commit the change to the pull request.
-rm -rdf output googleapis "${baseline_generation_config}"
-git add --all -- ':!pr_description.txt' ':!hermetic_library_generation.sh'
-changed_files=$(git diff --cached --name-only)
-if [[ "${changed_files}" != "" ]]; then
-    echo "Commit changes..."
-    git commit -m "${message}"
-    git push
-else
-    echo "There is no generated code change, skip commit."
-fi
-
-# set pr body if pr_description.txt is generated.
-if [[ -f "pr_description.txt" ]]; then
-  pr_num=$(gh pr list -s open -H "${current_branch}" -q . --json number | jq ".[] | .number")
-  gh pr edit "${pr_num}" --body "$(cat pr_description.txt)"
-fi
diff --git a/.github/workflows/hermetic_library_generation.yaml b/.github/workflows/hermetic_library_generation.yaml
index 51a087f8e..9f1a24bd6 100644
--- a/.github/workflows/hermetic_library_generation.yaml
+++ b/.github/workflows/hermetic_library_generation.yaml
@@ -18,30 +18,28 @@ on:
   pull_request:
 
 env:
-  HEAD_REF: ${{ github.head_ref }}
   REPO_FULL_NAME: ${{ github.event.pull_request.head.repo.full_name }}
   GITHUB_REPOSITORY: ${{ github.repository }}
-
 jobs:
   library_generation:
     runs-on: ubuntu-latest
     steps:
+    - name: Determine whether the pull request comes from a fork
+      run: |
+        if [[ "${GITHUB_REPOSITORY}" != "${REPO_FULL_NAME}" ]]; then
+          echo "This PR comes from a fork. Skip library generation."
+          echo "SHOULD_RUN=false" >> $GITHUB_ENV
+        else
+          echo "SHOULD_RUN=true" >> $GITHUB_ENV
+        fi
     - uses: actions/checkout@v4
+      if: env.SHOULD_RUN == 'true'
       with:
         fetch-depth: 0
         token: ${{ secrets.CLOUD_JAVA_BOT_TOKEN }}
-    - name: Generate changed libraries
-      shell: bash
-      run: |
-        set -ex
-        if [[ "${GITHUB_REPOSITORY}" != "${REPO_FULL_NAME}" ]]; then
-          echo "This PR comes from a fork. Generation will be skipped"
-          exit 0
-        fi
-        [ -z "$(git config user.email)" ] && git config --global user.email "cloud-java-bot@google.com"
-        [ -z "$(git config user.name)" ] && git config --global user.name "cloud-java-bot"
-        bash .github/scripts/hermetic_library_generation.sh \
-          --target_branch ${{ github.base_ref }} \
-          --current_branch $HEAD_REF
-      env:
-        GH_TOKEN: ${{ secrets.CLOUD_JAVA_BOT_TOKEN }}
+    - uses: googleapis/sdk-platform-java/.github/scripts@v2.46.1
+      if: env.SHOULD_RUN == 'true'
+      with:
+        base_ref: ${{ github.base_ref }}
+        head_ref: ${{ github.head_ref }}
+        token: ${{ secrets.CLOUD_JAVA_BOT_TOKEN }}