diff --git a/.github/workflows/dendrite.yml b/.github/workflows/dendrite.yml
index 735ea9113..99747f798 100644
--- a/.github/workflows/dendrite.yml
+++ b/.github/workflows/dendrite.yml
@@ -342,3 +342,5 @@ jobs:
     if: github.repository == 'matrix-org/dendrite' && github.ref_name == 'main'
     needs: [integration-tests-done]
     uses: matrix-org/dendrite/.github/workflows/docker.yml@main
+    secrets:
+      DOCKER_TOKEN: ${{ secrets.DOCKER_TOKEN }}
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 129a80487..642587924 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -7,6 +7,9 @@ on:
     types: [published]
   workflow_dispatch: # A build was manually requested
   workflow_call: # Another pipeline called us
+    secrets:
+      DOCKER_TOKEN:
+        required: true
 
 env:
   DOCKER_NAMESPACE: matrixdotorg