diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c8c7c43..9af9621 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -12,3 +12,6 @@ jobs:
       startsWith(github.event.head_commit.message, 'Release: v')
     name: 'Release'
     uses: 'google-github-actions/.github/.github/workflows/release.yml@v1' # ratchet:exclude
+    # secrets must be explicitly passed to reusable workflows https://docs.github.com/en/enterprise-cloud@latest/actions/using-workflows/reusing-workflows#using-inputs-and-secrets-in-a-reusable-workflow
+    secrets:
+      ACTIONS_BOT_TOKEN: '${{ secrets.ACTIONS_BOT_TOKEN }}'