diff --git a/.github/workflows/shared-go-auto-release.yml b/.github/workflows/shared-go-auto-release.yml
index 86e7bd17..d8be6858 100644
--- a/.github/workflows/shared-go-auto-release.yml
+++ b/.github/workflows/shared-go-auto-release.yml
@@ -59,8 +59,7 @@ on:
         description: Tag exists so skip new release issue
         value: ${{ jobs.publish.outputs.exists }}
 
-permissions:
-  content: read
+permissions: {}
 
 jobs:
   draft:
@@ -91,6 +90,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           path: source
+          token: ${{ steps.github-app.outputs.token }}
 
       - name: Unshallow
         working-directory: source
@@ -138,6 +138,7 @@ jobs:
             .github/goreleaser.yml
           sparse-checkout-cone-mode: false
           ref: main
+          token: ${{ steps.github-app.outputs.token }}
 
       - name: Go releaser config
         working-directory: source