diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a47bf904..416c5120 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -56,7 +56,7 @@ jobs:
         env:
           # just-setup use binstall to install sccache,
           # which works better when we provide it with GITHUB_TOKEN.
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.CI_RELEASE_TEST_GITHUB_TOKEN }}
         with:
           tools: cargo-nextest
 
@@ -100,7 +100,7 @@ jobs:
         env:
           # just-setup use binstall to install sccache,
           # which works better when we provide it with GITHUB_TOKEN.
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.CI_RELEASE_TEST_GITHUB_TOKEN }}
 
       - run: just avoid-dev-deps
       - run: just check
@@ -121,6 +121,10 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - uses: ./.github/actions/just-setup
+        env:
+          # just-setup use binstall to install sccache,
+          # which works better when we provide it with GITHUB_TOKEN.
+          GITHUB_TOKEN: ${{ secrets.CI_RELEASE_TEST_GITHUB_TOKEN }}
 
       - run: just toolchain rustfmt,clippy
       - run: just avoid-dev-deps
diff --git a/.github/workflows/release-packages.yml b/.github/workflows/release-packages.yml
index 4bcc7e31..5054d5ab 100644
--- a/.github/workflows/release-packages.yml
+++ b/.github/workflows/release-packages.yml
@@ -79,7 +79,9 @@ jobs:
         with:
           tools: cargo-auditable,rsign2,rage
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          # just-setup use binstall to install sccache,
+          # which works better when we provide it with GITHUB_TOKEN.
+          GITHUB_TOKEN: ${{ secrets.CI_RELEASE_TEST_GITHUB_TOKEN }}
 
       - run: just toolchain rust-src