diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index 377bb5a922..0a8cf059c0 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -296,6 +296,8 @@ jobs:
 
       - name: Sync vault templates and locales (Unix)
         if: matrix.goos != 'windows'
+        env:
+          VAULT_TOKEN: ${{ secrets.RELEASE_TOKEN }}
         run: |
           chmod +x scripts/sync-vault.sh
           ./scripts/sync-vault.sh
@@ -303,9 +305,11 @@ jobs:
       - name: Sync vault templates and locales (Windows)
         if: matrix.goos == 'windows'
         shell: pwsh
+        env:
+          VAULT_TOKEN: ${{ secrets.RELEASE_TOKEN }}
         run: |
           # Clone vault repo
-          git clone --depth 1 https://git.marketally.com/gitcaddy/gitcaddy-vault.git $env:TEMP\gitcaddy-vault
+          git clone --depth 1 "https://token:$($env:VAULT_TOKEN)@git.marketally.com/gitcaddy/gitcaddy-vault.git" "$env:TEMP\gitcaddy-vault"
 
           # Sync templates
           Copy-Item -Path "$env:TEMP\gitcaddy-vault\templates\repo\vault\*" -Destination "templates\repo\vault\" -Force -Recurse
@@ -603,6 +607,8 @@ jobs:
           fetch-depth: 0
 
       - name: Sync vault templates and locales
+        env:
+          VAULT_TOKEN: ${{ secrets.RELEASE_TOKEN }}
         run: |
           chmod +x scripts/sync-vault.sh
           ./scripts/sync-vault.sh
diff --git a/scripts/sync-vault.sh b/scripts/sync-vault.sh
index f473ea99db..88b2bb581a 100644
--- a/scripts/sync-vault.sh
+++ b/scripts/sync-vault.sh
@@ -15,7 +15,11 @@ if [ -z "$VAULT_PATH" ]; then
     VAULT_PATH=$(mktemp -d)
     CLEANUP_VAULT=true
     echo "Cloning gitcaddy-vault to $VAULT_PATH..."
-    git clone --depth 1 https://git.marketally.com/gitcaddy/gitcaddy-vault.git "$VAULT_PATH"
+    if [ -n "${VAULT_TOKEN:-}" ]; then
+        git clone --depth 1 "https://token:${VAULT_TOKEN}@git.marketally.com/gitcaddy/gitcaddy-vault.git" "$VAULT_PATH"
+    else
+        git clone --depth 1 https://git.marketally.com/gitcaddy/gitcaddy-vault.git "$VAULT_PATH"
+    fi
 else
     CLEANUP_VAULT=false
     echo "Using vault from $VAULT_PATH"