diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index de7b77059eea721a4ff9f21f404d866c00912edc..eb7a36db5ba214e0cb80b708a6d743be89983205 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -801,6 +801,7 @@ jobs:
     name: Build with Nix
     uses: ./.github/workflows/nix.yml
     if: github.repository_owner == 'zed-industries' && contains(github.event.pull_request.labels.*.name, 'run-nix')
+    secrets: inherit
     with:
       flake-output: debug
       # excludes the final package to only cache dependencies
diff --git a/.github/workflows/release_nightly.yml b/.github/workflows/release_nightly.yml
index 54cd2e8684d92f15fb847d39243eeaad58acdabd..d9287cb0826815a4b60c72389b950156da43df99 100644
--- a/.github/workflows/release_nightly.yml
+++ b/.github/workflows/release_nightly.yml
@@ -214,6 +214,7 @@ jobs:
   bundle-nix:
     name: Build and cache Nix package
     needs: tests
+    secrets: inherit
     uses: ./.github/workflows/nix.yml
 
   update-nightly-tag: