diff --git a/.github/workflows/tero-release-please.yaml b/.github/workflows/tero-release-please.yaml
index 4d7d19262e860..3475909848f5c 100644
--- a/.github/workflows/tero-release-please.yaml
+++ b/.github/workflows/tero-release-please.yaml
@@ -32,6 +32,13 @@ jobs:
     # `master` is ever pushed back upstream by accident.
     if: github.repository_owner == 'usetero'
     steps:
+      - name: Generate a token
+        id: generate-token
+        uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2.2.1
+        with:
+          app-id: ${{ secrets.TERO_BOT_CLIENT_ID }}
+          private-key: ${{ secrets.TERO_BOT_PRIVATE_SIGNING_KEY }}
+          owner: ${{ github.repository_owner }}
       - uses: googleapis/release-please-action@5c625bfb5d1ff62eadeeb3772007f7f66fdcf071 # v4.4.1
         with:
           # GITHUB_TOKEN works, but PRs it creates cannot trigger other