diff --git a/.github/workflows/esr.yml b/.github/workflows/esr.yml
index 41613c9e..24fc501d 100644
--- a/.github/workflows/esr.yml
+++ b/.github/workflows/esr.yml
@@ -21,4 +21,5 @@ jobs:
   esr:
     name: Create ESR branch and tag
     uses: balena-os/github-workflows/.github/workflows/esr.yml@master
-    secrets: inherit
+    secrets:
+      GH_APP_PRIVATE_KEY: ${{ secrets.GH_APP_PRIVATE_KEY }}
diff --git a/.github/workflows/flowzone.yml b/.github/workflows/flowzone.yml
index 1f65637e..6472f2e3 100644
--- a/.github/workflows/flowzone.yml
+++ b/.github/workflows/flowzone.yml
@@ -26,4 +26,5 @@ jobs:
         github.event.pull_request.head.repo.full_name != github.repository &&
         github.event_name == 'pull_request_target'
       )
-    secrets: inherit
+    secrets:
+      GH_APP_PRIVATE_KEY: ${{ secrets.GH_APP_PRIVATE_KEY }}