diff --git a/.github/workflows/lint-fix-if-needed.yml b/.github/workflows/lint-fix-if-needed.yml
index dc41550aa9e3..c8c046c4cdf2 100644
--- a/.github/workflows/lint-fix-if-needed.yml
+++ b/.github/workflows/lint-fix-if-needed.yml
@@ -45,7 +45,7 @@ jobs:
           path: .eslintcache
           key: eslint-v1-${{ hashFiles('.eslintrc.cjs') }}
       - run: "yarn lint:fix --rule 'prettier/prettier: [off]'"
-      - uses: tibdex/github-app-token@b62528385c34dbc9f38e5f4225ac829252d1ea92 # v1
+      - uses: tibdex/github-app-token@0914d50df753bbc42180d982a6550f195390069f # v2
         # Run even if `yarn lint:fix` fails
         if: always()
         id: generate-token
diff --git a/.github/workflows/prettier-if-needed.yml b/.github/workflows/prettier-if-needed.yml
index 6ac358cf09cd..b53ef16672b4 100644
--- a/.github/workflows/prettier-if-needed.yml
+++ b/.github/workflows/prettier-if-needed.yml
@@ -47,7 +47,7 @@ jobs:
       - run: yarn prettier --write
       - name: GitHub blocks PRs from automation that alter workflows in any way
         run: git restore .github/workflows yarn.lock
-      - uses: tibdex/github-app-token@b62528385c34dbc9f38e5f4225ac829252d1ea92 # v1
+      - uses: tibdex/github-app-token@0914d50df753bbc42180d982a6550f195390069f # v2
         id: generate-token
         with:
           app_id: ${{ secrets.ECOSPARK_APP_ID }}
diff --git a/.github/workflows/yarn-if-needed.yml b/.github/workflows/yarn-if-needed.yml
index ba9f82cbd63c..1626d46f34ea 100644
--- a/.github/workflows/yarn-if-needed.yml
+++ b/.github/workflows/yarn-if-needed.yml
@@ -39,7 +39,7 @@ jobs:
         if: steps.cache-node-modules.outputs.cache-hit != 'true'
         run: yarn install --ignore-scripts --frozen-lockfile --update-checksums --force
       - run: npx yarn-deduplicate -- yarn.lock --strategy highest
-      - uses: tibdex/github-app-token@b62528385c34dbc9f38e5f4225ac829252d1ea92 # v1
+      - uses: tibdex/github-app-token@0914d50df753bbc42180d982a6550f195390069f # v2
         id: generate-token
         with:
           app_id: ${{ secrets.ECOSPARK_APP_ID }}