diff --git a/.github/workflows/submodule-auto-merge.yml b/.github/workflows/submodule-auto-merge.yml
index 30f9fb06..68e6072f 100644
--- a/.github/workflows/submodule-auto-merge.yml
+++ b/.github/workflows/submodule-auto-merge.yml
@@ -10,8 +10,14 @@ jobs:
     runs-on: ubuntu-latest
     if: "${{github.actor == 'd2ai-bot' && github.event.pull_request.title == 'submodule update: generate-font'}}"
     steps:
+      - uses: actions/create-github-app-token@v1
+        id: app-token
+        with:
+          # required
+          app-id: ${{ secrets.AUTOMERGE_APP_ID }}
+          private-key: ${{ secrets.AUTOMERGE_PRIVATE_KEY }}
       - name: Enable auto-merge for submodule updates
         run: gh pr merge --auto --merge "$PR_URL"
         env:
           PR_URL: ${{github.event.pull_request.html_url}}
-          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
+          GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}