diff --git a/.github/workflows/cla.yml b/.github/workflows/cla.yml
index 536e364a402b9..850eeddfc2057 100644
--- a/.github/workflows/cla.yml
+++ b/.github/workflows/cla.yml
@@ -22,7 +22,7 @@ jobs:
         if: github.event_name == 'merge_group'
         run: echo "CLA verification not needed for merge queue - already checked on PR"
 
-      - uses: DataDog/dd-octo-sts-action@acaa02eee7e3bb0839e4272dacb37b8f3b58ba80 # v1.0.3
+      - uses: DataDog/dd-octo-sts-action@96a25462dbcb10ebf0bfd6e2ccc917d2ab235b9a # v1.0.4
         if: github.event_name != 'merge_group'
         id: octo-sts
         with: