diff --git a/.github/workflows/post-release.yml b/.github/workflows/post-release.yml
index 3be564acba..044ebd7deb 100644
--- a/.github/workflows/post-release.yml
+++ b/.github/workflows/post-release.yml
@@ -45,7 +45,7 @@ jobs:
         if: steps.meta.outputs.skip != 'true'
         env:
           VERSION: ${{ steps.meta.outputs.version }}
-          GH_TOKEN: ${{ github.token }}
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -euo pipefail
           TAG="v${VERSION}"
@@ -125,7 +125,7 @@ jobs:
         if: steps.meta.outputs.skip != 'true' && steps.exist.outputs.skip != 'true' && steps.body.outputs.has_body == 'true'
         env:
           VERSION: ${{ steps.meta.outputs.version }}
-          GH_TOKEN: ${{ github.token }}
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -euo pipefail
           TAG="v${VERSION}"
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1f44b49e69..f60a2a9fed 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -360,7 +360,7 @@ jobs:
       - name: Create Pull Request to main (release)
         if: startsWith(github.ref_name, 'release/')
         env:
-          GH_TOKEN: ${{ github.token }}
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -euo pipefail
           BRANCH="${GITHUB_REF_NAME}"