diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 4a23648..203845d 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -28,7 +28,7 @@ jobs:
     runs-on: ubuntu-24.04
     if: github.ref_name == 'main'
     steps:
-      - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3
+      - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
         id: app-token
         # NOTE: This is needed otherwise it's the same user that create the tag
         # than the one triggering the workflow on push tag which does not work