diff --git a/.github/workflows/pkg-installer.yml b/.github/workflows/pkg-installer.yml
index 10dd384215..577d0fd527 100644
--- a/.github/workflows/pkg-installer.yml
+++ b/.github/workflows/pkg-installer.yml
@@ -233,7 +233,7 @@ jobs:
       - name: Upload installer to GitHub release
         if: github.event_name == 'release'
         env:
-          GH_TOKEN: ${{ github.token }}
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           INSTALLER_PATH: ${{ needs.build.outputs.installer_path }}
         run: |
           VERSION="${INSTALLER_PATH#Homebrew-}"
diff --git a/Library/Homebrew/dev-cmd/tap-new.rb b/Library/Homebrew/dev-cmd/tap-new.rb
index 7be43d3ed8..2b9ed6137b 100644
--- a/Library/Homebrew/dev-cmd/tap-new.rb
+++ b/Library/Homebrew/dev-cmd/tap-new.rb
@@ -99,7 +99,7 @@ module Homebrew
                   id: set-up-homebrew
                   uses: Homebrew/actions/setup-homebrew@main
                   with:
-                    token: ${{ github.token }}
+                    token: ${{ secrets.GITHUB_TOKEN }}
 
                 - name: Cache Homebrew Bundler RubyGems
                   uses: actions/cache@v4
@@ -118,7 +118,7 @@ module Homebrew
                   id: base64-encode
                   if: github.event_name == 'pull_request'
                   env:
-                    TOKEN: ${{ github.token }}
+                    TOKEN: ${{ secrets.GITHUB_TOKEN }}
                   run: |
                     base64_token=$(echo -n "${TOKEN}" | base64 | tr -d "\\n")
                     echo "::add-mask::${base64_token}"
@@ -164,16 +164,16 @@ module Homebrew
                 - name: Set up Homebrew
                   uses: Homebrew/actions/setup-homebrew@main
                   with:
-                    token: ${{ github.token }}
+                    token: ${{ secrets.GITHUB_TOKEN }}
 
                 - name: Set up git
                   uses: Homebrew/actions/git-user-config@main
 
                 - name: Pull bottles
                   env:
-                    HOMEBREW_GITHUB_API_TOKEN: ${{ github.token }}
+                    HOMEBREW_GITHUB_API_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           <% if args.github_packages? -%>
-                    HOMEBREW_GITHUB_PACKAGES_TOKEN: ${{ github.token }}
+                    HOMEBREW_GITHUB_PACKAGES_TOKEN: ${{ secrets.GITHUB_TOKEN }}
                     HOMEBREW_GITHUB_PACKAGES_USER: ${{ github.repository_owner }}
           <% end -%>
                     PULL_REQUEST: ${{ github.event.pull_request.number }}