diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index b19a622..ae095eb 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -19,7 +19,7 @@ jobs:
     runs-on: 'ubuntu-latest'
     steps:
       - name: 'Harden the runner (Audit all outbound calls)'
-        uses: 'step-security/harden-runner@351661ca32ac09a36dc5ee2d536e3128f2a3c8ed' # v2.22.0
+        uses: 'step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25' # v2.22.1
         with:
           egress-policy: 'audit'
 
@@ -58,7 +58,7 @@ jobs:
       url: '${{ steps.deployment.outputs.page_url }}'
     steps:
       - name: 'Harden the runner (Audit all outbound calls)'
-        uses: 'step-security/harden-runner@351661ca32ac09a36dc5ee2d536e3128f2a3c8ed' # v2.22.0
+        uses: 'step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25' # v2.22.1
         with:
           egress-policy: 'audit'
 
diff --git a/.github/workflows/pre-commit-autoupdate.yml b/.github/workflows/pre-commit-autoupdate.yml
index 0f6b9b7..ac01fb8 100644
--- a/.github/workflows/pre-commit-autoupdate.yml
+++ b/.github/workflows/pre-commit-autoupdate.yml
@@ -13,7 +13,7 @@ jobs:
     steps:
       - name: 'Generate app token'
         id: 'app-token'
-        uses: 'actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1' # v3.2.0
+        uses: 'actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510' # v3.3.0
         with:
           client-id: '${{ vars.LF_AUTOMATION_CLIENT_ID }}'
           private-key: '${{ secrets.LF_AUTOMATION_APP_PRIVATE_KEY }}'