diff --git a/.github/actions/configure_bazelrc/action.yaml b/.github/actions/configure_bazelrc/action.yaml
index 284bf92aa..e5d56ca42 100644
--- a/.github/actions/configure_bazelrc/action.yaml
+++ b/.github/actions/configure_bazelrc/action.yaml
@@ -5,6 +5,9 @@ inputs:
     type: string
     description: The path to the bazelrc file to use as the starting point.
     default: '.bazelrc.ci'
+  buildbuddy_api_key:
+    type: string
+    description: Buildbuddy API key
 
 runs:
   using: composite
@@ -22,7 +25,7 @@ runs:
       # TODO: Update with the correct tagged release.
     - uses: tweag/configure-bazel-remote-cache-auth@fix_output
       with:
-        buildbuddy_api_key: ${{ secrets.BUILDBUDDY_API_KEY }}
+        buildbuddy_api_key: ${{ inputs.buildbuddy_api_key }}
         bazelrc_path: ${{ steps.create_bazelrc_tmp.bazelrc_tmp }}
 
     - shell: bash
diff --git a/.github/workflows/workflow.yaml b/.github/workflows/workflow.yaml
index 21115bf7e..ca6a0272a 100644
--- a/.github/workflows/workflow.yaml
+++ b/.github/workflows/workflow.yaml
@@ -38,6 +38,8 @@ jobs:
         with:
           nix_path: nixpkgs=./docs/nixpkgs.nix
       - uses: ./.github/actions/configure_bazelrc
+        with:
+          buildbuddy_api_key: ${{ secrets.BUILDBUDDY_API_KEY }}
       - name: Start remote Nix server
         if: matrix.withNixRemote && matrix.os == 'ubuntu-latest'
         run: |
@@ -82,6 +84,8 @@ jobs:
         with:
           nix_path: nixpkgs=./nixpkgs.nix
       - uses: ./.github/actions/configure_bazelrc
+        with:
+          buildbuddy_api_key: ${{ secrets.BUILDBUDDY_API_KEY }}
       - name: Build & test
         run: |
           skip() {