diff --git a/upload.sh b/upload.sh
index fd97e979..89924897 100755
--- a/upload.sh
+++ b/upload.sh
@@ -26,6 +26,7 @@ createRelease() {
     res=$(curl -s -L -X POST \
         "https://api.github.com/repos/$GUSER/$GREPO/releases" \
         -H "Accept: application/vnd.github+json" \
+        -H "Authorization: Bearer $GITHUB_API_TOKEN"" \
         -d "{\"tag_name\":\"$TAG\",\"name\":\"AOSP 14.0 $TAG\",\"body\":\"## Changelog\n- ...\n\n## Notes\n- ...\",\"draft\":true}")
     id=$(echo "$res" | jq -rc ".id")
     echo
@@ -38,6 +39,7 @@ uploadAssets() {
         curl -o /dev/null -s -L -X POST \
             "https://uploads.github.com/repos/$GUSER/$GREPO/releases/$id/assets?name=$(basename $file)" \
             -H "Accept: application/vnd.github+json" \
+            -H "Authorization: Bearer $GITHUB_API_TOKEN"" \
             -H "Content-Type: application/octet-stream" \
             -T "$file"
         echo