diff --git a/CHANGELOG.md b/CHANGELOG.md
index a336655..8cf38e3 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,11 @@
 # Changelog
 
+## Unreleased
+
+### Features
+
+- Danger - add "github" to the list of whitelisted users for action-pinning check ([#55](https://github.com/getsentry/github-workflows/pull/55))
+
 ## 2.5.1
 
 ### Fixes
diff --git a/danger/dangerfile.js b/danger/dangerfile.js
index 7adccb9..b714e56 100644
--- a/danger/dangerfile.js
+++ b/danger/dangerfile.js
@@ -149,7 +149,7 @@ async function checkActionsArePinned() {
     /^\+? *uses: *(?<user>[^\/]+)\/(?<action>[^@]+)@(?<ref>[^ ]*)/;
   const usesLocalRegex = /^\+? *uses: *\.\//; // e.g. 'uses: ./.github/actions/something'
   const shaRegex = /^[a-f0-9]{40}$/;
-  const whitelistedUsers = ["getsentry", "actions"];
+  const whitelistedUsers = ["getsentry", "actions", "github"];
 
   for (const path of workflowFiles) {
     const diff = await danger.git.structuredDiffForFile(path);