diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index cf45ccd128d..7ac92359ac3 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -30,6 +30,9 @@ on:
       DEVELOCITY_ACCESS_KEY:
         description: 'Token for submitting build scan to Develocity'
         required: false
+      OZONE_WEBSITE_BUILD:
+        description: 'Token for publishing to apache/ozone-site'
+        required: false
       SONARCLOUD_TOKEN:
         description: 'Token for submitting coverage data to SonarCloud'
         required: false
@@ -156,6 +159,8 @@ jobs:
     uses: ./.github/workflows/update-ozone-site-config-doc.yml
     permissions:
       contents: read
+    secrets:
+      OZONE_WEBSITE_BUILD: ${{ secrets.OZONE_WEBSITE_BUILD }}
 
   compile:
     needs:
diff --git a/.github/workflows/post-commit.yml b/.github/workflows/post-commit.yml
index 3c15d231076..3f17192eb06 100644
--- a/.github/workflows/post-commit.yml
+++ b/.github/workflows/post-commit.yml
@@ -30,4 +30,5 @@ jobs:
     uses: ./.github/workflows/ci.yml
     secrets:
       DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
+      OZONE_WEBSITE_BUILD: ${{ secrets.OZONE_WEBSITE_BUILD }}
       SONARCLOUD_TOKEN: ${{ secrets.SONARCLOUD_TOKEN }}
diff --git a/.github/workflows/update-ozone-site-config-doc.yml b/.github/workflows/update-ozone-site-config-doc.yml
index f6ce6dd896a..865445482f6 100644
--- a/.github/workflows/update-ozone-site-config-doc.yml
+++ b/.github/workflows/update-ozone-site-config-doc.yml
@@ -16,6 +16,10 @@
 name: update-ozone-site-config-doc
 on:
   workflow_call:
+    secrets:
+      OZONE_WEBSITE_BUILD:
+        description: 'Token for publishing to apache/ozone-site'
+        required: false
 
 env:
   BRANCH_NAME: automated-config-doc-update