diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml
index 6b262942dad..8b9103d7c79 100755
--- a/.github/workflows/auto-merge.yml
+++ b/.github/workflows/auto-merge.yml
@@ -31,9 +31,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
         with:
           ref: ${{ env.HEAD }} # force to fetch from latest upstream instead of PR ref
+          token: ${{ secrets.AUTOMERGE_TOKEN }} # workaround auto-merge token to avoid GITHUB_TOKEN insufficient permission
 
       - name: push intermediate branch for auto-merge
         run: |