diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
index d2a9468e8fa..54547966f83 100644
--- a/.github/workflows/renovate.yml
+++ b/.github/workflows/renovate.yml
@@ -16,7 +16,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v3
-
+        with:
+          token: ${{ secrets.GH_PUSH_TOKEN }}
       - uses: actions/cache@v3
         with:
           path: /home/vscode/.cache/_grpc_gateway_bazel
@@ -39,7 +40,6 @@ jobs:
           if output=$(git status --porcelain) && [ ! -z "$output" ]; then
             git config user.name "Renovate Bot"
             git config user.email "bot@renovateapp.com"
-            git remote set-url origin https://${{ secrets.GH_PUSH_USER }}:${{ secrets.GH_PUSH_TOKEN }}@github.com/grpc-ecosystem/grpc-gateway.git
             git commit --amend --no-edit
             git push --force-with-lease origin ${{ github.ref_name }}
           fi
@@ -57,6 +57,8 @@ jobs:
       - update_repositoriesbzl
     steps:
       - uses: actions/checkout@v3
+        with:
+          token: ${{ secrets.GH_PUSH_TOKEN }}
       - run: make install
       - run: make clean
       - run: make generate
@@ -66,7 +68,6 @@ jobs:
           if output=$(git status --porcelain) && [ ! -z "$output" ]; then
             git config user.name "Renovate Bot"
             git config user.email "bot@renovateapp.com"
-            git remote set-url origin https://${{ secrets.GH_PUSH_USER }}:${{ secrets.GH_PUSH_TOKEN }}@github.com/grpc-ecosystem/grpc-gateway.git
             git commit --amend --no-edit
             git push --force-with-lease origin ${{ github.ref_name }}
           fi