diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c1657562d..8722afd6a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -110,14 +110,16 @@ jobs:
     if: github.repository == 'lucide-icons/lucide'
     needs: create-release
     uses: './.github/workflows/release.yml'
-    secrets: inherit
+    secrets:
+      BLOB_READ_WRITE_TOKEN: ${{ secrets.BLOB_READ_WRITE_TOKEN }}
     with:
       version: ${{ needs.create-release.outputs.VERSION }}
 
   dispatch-release:
     if: github.event_name == 'workflow_dispatch'
     uses: './.github/workflows/release.yml'
-    secrets: inherit
+    secrets:
+      BLOB_READ_WRITE_TOKEN: ${{ secrets.BLOB_READ_WRITE_TOKEN }}
     with:
       version: ${{ inputs.version }}
       tag: ${{ inputs.tag }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ad4b92321..4ec303539 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -15,6 +15,10 @@ on:
         description: NPM tag
         default: 'latest'
         type: string
+    secrets:
+      BLOB_READ_WRITE_TOKEN:
+        description: Token used by build-font to upload the code points blob
+        required: false
 
 permissions:
   id-token: write # Required for OIDC