diff --git a/.github/workflows/partial-publish.yaml b/.github/workflows/partial-publish.yaml
index 8c5f56f..4ade12a 100644
--- a/.github/workflows/partial-publish.yaml
+++ b/.github/workflows/partial-publish.yaml
@@ -11,6 +11,10 @@ on:
         type: boolean
         default: false
 
+    secrets:
+      GITHUB_TOKEN:
+        required: true
+
 jobs:
   publish:
     name: "Publish Homebox"
@@ -38,7 +42,7 @@ jobs:
       - name: login to container registry
         run: docker login ghcr.io --username hay-kot --password $CR_PAT
         env:
-          CR_PAT: ${{ secrets.CR_PAT }}
+          CR_PAT: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build and push
         uses: docker/build-push-action@v3
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 27b831d..fac0c8b 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -41,6 +41,8 @@ jobs:
     with:
       release: true
       tag: ${{ github.event.release.tag_name }}
+    secrets:
+      GITHUB_TOKEN: ${{ secrets.CR_PAT }}
 
   publish-nightly:
     name: "Publish Nightly"
@@ -50,6 +52,8 @@ jobs:
     uses: hay-kot/homebox/.github/workflows/partial-publish.yaml@main
     with:
       tag: nightly
+    secrets:
+      GITHUB_TOKEN: ${{ secrets.CR_PAT }}
 
   deploy-docs:
     name: Deploy docs