diff --git a/.github/workflows/address-review-comments.yaml b/.github/workflows/address-review-comments.yaml
index ceda472cf25..cd8ee3fe6dc 100644
--- a/.github/workflows/address-review-comments.yaml
+++ b/.github/workflows/address-review-comments.yaml
@@ -41,7 +41,7 @@ jobs:
           fetch-depth: 0
 
       - name: Authenticate to GCP via WIF
-        uses: google-github-actions/auth@c200f3691d83b41bf9bbd8638997a462592937ed # v2
+        uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3.0.0
         with:
           project_id: hosted-control-planes
           service_account: claude-gha@hosted-control-planes.iam.gserviceaccount.com