diff --git a/.gitea/workflows/ci.yaml b/.gitea/workflows/ci.yaml
index df6f861..bb0f652 100644
--- a/.gitea/workflows/ci.yaml
+++ b/.gitea/workflows/ci.yaml
@@ -17,7 +17,7 @@ jobs:
     env:
       GOPRIVATE: forgejo.riotpiao.com
       GOFLAGS: -mod=readonly
-      GIT_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      REGISTRY_PAT: ${{ secrets.REGISTRY_PAT }}
     steps:
       # actions/checkout is a Node-based action; golang:1.25 has no node on PATH.
       - name: install node (required by JS-based actions)
@@ -29,9 +29,9 @@ jobs:
       # GITHUB_TOKEN is auto-injected by Forgejo Actions and has read access to all repos.
       - name: configure git auth for private module fetch
         run: |
-          git config --global url."https://oauth2:${GIT_TOKEN}@forgejo.riotpiao.com".insteadOf "https://forgejo.riotpiao.com"
+          git config --global url."https://oauth2:${REGISTRY_PAT}@forgejo.riotpiao.com".insteadOf "https://forgejo.riotpiao.com"
         env:
-          GIT_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          REGISTRY_PAT: ${{ secrets.REGISTRY_PAT }}
 
       - name: cache go modules + build cache
         uses: actions/cache@v4