diff --git a/.github/workflows/bake.yml b/.github/workflows/bake.yml
index 4f63568..a23d021 100644
--- a/.github/workflows/bake.yml
+++ b/.github/workflows/bake.yml
@@ -482,9 +482,9 @@ jobs:
           pull: ${{ inputs.bake-pull }}
           sbom: ${{ inputs.bake-sbom }}
           set: ${{ steps.prepare.outputs.overrides }}
-          github-token: ${{ secrets.github-token || github.token }}
         env:
           BUILDKIT_MULTI_PLATFORM: 1
+          BUILDX_BAKE_GIT_AUTH_TOKEN: ${{ secrets.github-token || github.token }}
       -
         name: Get image digest
         id: get-image-digest
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 183d782..59d72e4 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -385,12 +385,13 @@ jobs:
           provenance: mode=max,version=v1
           pull: ${{ inputs.build-pull }}
           sbom: ${{ inputs.build-sbom }}
+          secret-envs: GIT_AUTH_TOKEN=GIT_AUTH_TOKEN
           shm-size: ${{ inputs.build-shm-size }}
           target: ${{ inputs.build-target }}
           ulimit: ${{ inputs.build-ulimit }}
-          github-token: ${{ secrets.github-token || github.token }}
         env:
           BUILDKIT_MULTI_PLATFORM: 1
+          GIT_AUTH_TOKEN: ${{ secrets.github-token || github.token }}
       -
         name: Install Cosign
         if: ${{ inputs.push }}