diff --git a/.github/workflows/trivy-scan.yml b/.github/workflows/trivy-scan.yml
index 7172aacf..7981d2c2 100644
--- a/.github/workflows/trivy-scan.yml
+++ b/.github/workflows/trivy-scan.yml
@@ -44,6 +44,7 @@ jobs:
           scan-type: 'fs'
           scan-ref: '${{ env.LOCAL_REPOSITORY_PATH }}/org/springframework/pulsar'
           trivy-config: ${{ inputs.config-path }}
+          github-pat: ${{ secrets.GH_ACTIONS_REPO_TOKEN }}
       - name: Upload Trivy scan results to GitHub Security tab
         if: inputs.upload-results
         uses: github/codeql-action/upload-sarif@v3