diff --git a/.github/workflows/_reusable_add-content-to-project.yml b/.github/workflows/_reusable_add-content-to-project.yml
index a4e8e3bb4..d93091a3c 100644
--- a/.github/workflows/_reusable_add-content-to-project.yml
+++ b/.github/workflows/_reusable_add-content-to-project.yml
@@ -33,6 +33,13 @@ on:
         description: "The name of one of the values of the project's (single select) 'Status' field, to set for the added project item"
         required: true
         type: string
+    secrets:
+      HACKERSPACE_BOT_APP_ID:
+        description: "The App ID of a GitHub organization app with read and write access to repository contents, issues and pull requests, and organization projects"
+        required: true
+      HACKERSPACE_BOT_APP_PEM:
+        description: "A private key for the app with ID HACKERSPACE_BOT_APP_ID"
+        required: true
 
 jobs:
   add_content:
@@ -41,7 +48,7 @@ jobs:
     steps:
       - name: Generate token
         id: generate_token
-        uses: tibdex/github-app-token@0914d50df753bbc42180d982a6550f195390069f # v2.0.0
+        uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0
         with:
           app_id: ${{ secrets.HACKERSPACE_BOT_APP_ID }}
           private_key: ${{ secrets.HACKERSPACE_BOT_APP_PEM }}
diff --git a/.github/workflows/label-release-pull-request.yml b/.github/workflows/label-release-pull-request.yml
index 8246f0e02..7ada52877 100644
--- a/.github/workflows/label-release-pull-request.yml
+++ b/.github/workflows/label-release-pull-request.yml
@@ -25,7 +25,7 @@ jobs:
     steps:
       - name: Generate token
         id: generate_token
-        uses: tibdex/github-app-token@0914d50df753bbc42180d982a6550f195390069f # v2.0.0
+        uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0
         with:
           app_id: ${{ secrets.HACKERSPACE_BOT_APP_ID }}
           private_key: ${{ secrets.HACKERSPACE_BOT_APP_PEM }}