diff --git a/.github/workflows/templating.yml b/.github/workflows/templating.yml
index 92684ff36..91676d160 100644
--- a/.github/workflows/templating.yml
+++ b/.github/workflows/templating.yml
@@ -14,7 +14,7 @@ jobs:
       pull-requests: write
     steps:
       - id: create-token
-        uses: actions/create-github-app-token@v2
+        uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
         with:
           app-id: ${{ secrets.APP_ID }}
           private-key: ${{ secrets.APP_PRIVATE_KEY }}