diff --git a/.github/workflows/wc-enable-automerge.yaml b/.github/workflows/wc-enable-automerge.yaml
index bc8d0d4b8..6ce17bdbe 100644
--- a/.github/workflows/wc-enable-automerge.yaml
+++ b/.github/workflows/wc-enable-automerge.yaml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     permissions: {}
     steps:
-      - uses: tibdex/github-app-token@v2.1.0
+      - uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0
         id: token
         with:
           app_id: ${{secrets.gh_app_id}}