diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 49fe8f82b1fb1b395c70b0813f79ea882cf83860..5fb32f7e6a24360c03f7c2aac800173998277961 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -165,6 +165,8 @@ jobs:
     - name: script/draft-release-notes "$RELEASE_VERSION" "$RELEASE_CHANNEL" > target/release-notes.md || true
       run: script/draft-release-notes "$RELEASE_VERSION" "$RELEASE_CHANNEL" > target/release-notes.md || true
       shell: bash -euxo pipefail {0}
+      env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     - name: script/create-draft-release target/release-notes.md
       run: script/create-draft-release target/release-notes.md
       shell: bash -euxo pipefail {0}
diff --git a/tooling/xtask/src/tasks/workflows/release.rs b/tooling/xtask/src/tasks/workflows/release.rs
index 1a6533d0a4c9ede450930b0f0561562cf2556c45..1b964fa3a2d889cfbd3fe061806ee3d3a4a2d47b 100644
--- a/tooling/xtask/src/tasks/workflows/release.rs
+++ b/tooling/xtask/src/tasks/workflows/release.rs
@@ -179,7 +179,9 @@ fn create_draft_release() -> NamedJob {
             )
             .add_step(steps::script("script/determine-release-channel")) // export RELEASE_CHANNEL and RELEASE_VERSION
             .add_step(steps::script("mkdir -p target/"))
-            .add_step(steps::script(r#"script/draft-release-notes "$RELEASE_VERSION" "$RELEASE_CHANNEL" > target/release-notes.md || true"#))
+            .add_step(steps::script(r#"script/draft-release-notes "$RELEASE_VERSION" "$RELEASE_CHANNEL" > target/release-notes.md || true"#)
+                .add_env(("GITHUB_TOKEN", "${{ secrets.GITHUB_TOKEN }}"))
+            )
             .add_step(steps::script("script/create-draft-release target/release-notes.md")),
     )
 }