diff --git a/.forgejo/workflows/renovate.yml b/.forgejo/workflows/renovate.yml
index dc9fdd5..903cd9d 100644
--- a/.forgejo/workflows/renovate.yml
+++ b/.forgejo/workflows/renovate.yml
@@ -25,7 +25,6 @@ jobs:
       image: renovate/renovate:39.95.0@sha256:c833350291b29d1ca6c8fedadb14dfa7e95e0f795c88aed1a89f81ec1c79a9a7
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: "Import Secrets"
         id: "import-secrets"
         uses: "https://github.com/hashicorp/vault-action@d1720f055e0635fd932a1d2a48f87a666a57906c" # v3
@@ -43,6 +42,11 @@ jobs:
             kv/data/ci/renovatebot gpgPassphrase | RENOVATE_GPG_PASSPHRASE ;
             kv/data/ci/renovatebot ciToken | RENOVATE_TOKEN ;
             kv/data/ci/renovatebot githubToken | GITHUB_COM_TOKEN ;
+      - name: Checkout Repo
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          token: "${{ env.RENOVATE_TOKEN }}"
+
       - name: Load renovate repo cache
         uses: https://github.com/actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4
         with: