diff --git a/.gitea/workflows/build-prod.yaml b/.gitea/workflows/build-prod.yaml
index 1631270..e3285f9 100644
--- a/.gitea/workflows/build-prod.yaml
+++ b/.gitea/workflows/build-prod.yaml
@@ -25,7 +25,6 @@ jobs:
       DOCKER_HOST: tcp://localhost:2376
       DOCKER_TLS_VERIFY: "1"
       DOCKER_CERT_PATH: /docker-certs/client
-      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
       - name: install node (required by JS-based actions)
         run: apk add --no-cache nodejs git
@@ -40,8 +39,10 @@ jobs:
 
       - name: Registry login
         run: |
-          echo "${GITHUB_TOKEN}" | docker login "${REGISTRY}" \
+          echo "${REGISTRY_PAT}" | docker login "${REGISTRY}" \
             --username rock --password-stdin
+        env:
+          REGISTRY_PAT: ${{ secrets.REGISTRY_PAT }}
 
       - name: Build
         run: |
diff --git a/.gitea/workflows/build.yaml b/.gitea/workflows/build.yaml
index bb5e7ba..404126f 100644
--- a/.gitea/workflows/build.yaml
+++ b/.gitea/workflows/build.yaml
@@ -67,10 +67,10 @@ jobs:
 
       - name: Registry login
         run: |
-          echo "${GITHUB_TOKEN}" | docker login "${REGISTRY}" \
+          echo "${REGISTRY_PAT}" | docker login "${REGISTRY}" \
             --username rock --password-stdin
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          REGISTRY_PAT: ${{ secrets.REGISTRY_PAT }}
 
       - name: Build
         run: |