diff --git a/.github/workflows/project-management.yaml b/.github/workflows/project-management.yaml
index a41be09..a0180d8 100644
--- a/.github/workflows/project-management.yaml
+++ b/.github/workflows/project-management.yaml
@@ -32,7 +32,7 @@ jobs:
     runs-on: cx-public-ubuntu-x64
     if: github.event_name == 'pull_request_target'
     steps:
-      - uses: toshimaru/auto-author-assign@ebd30f10fb56e46eb0759a14951f36991426fed0
+      - uses: step-security/auto-author-assign@19b067947267f790ed6268e2bc94dafc418bbf9a # v3.0.3
 
   comment-on-possible-stale-issues:
     # This job uses the stale action to find inactive assigned issues and pull requests,