diff --git a/.github/workflows/repository-controls.yml b/.github/workflows/repository-controls.yml
index 8dcdf3d..6960ad9 100644
--- a/.github/workflows/repository-controls.yml
+++ b/.github/workflows/repository-controls.yml
@@ -22,5 +22,5 @@ jobs:
       - run: npm ci --ignore-scripts
       - name: Refuse repository-policy drift
         env:
-          GH_TOKEN: ${{ github.token }}
+          GH_TOKEN: ${{ secrets.REPOSITORY_AUDIT_TOKEN }}
         run: node scripts/audit-repository-controls.mjs