diff --git a/.depot/workflows/governance-enforce.yml b/.depot/workflows/governance-enforce.yml
index b2df9ad..4662b00 100644
--- a/.depot/workflows/governance-enforce.yml
+++ b/.depot/workflows/governance-enforce.yml
@@ -55,7 +55,8 @@ jobs:
         # FIX 1 — token scoped to THIS STEP. At job level it was also in scope for the step that
         # executes the downloaded package, and for anything else the job ever grows.
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          # Depot has no automatic GITHUB_TOKEN: use the imported packages token.
+          NODE_AUTH_TOKEN: ${{ secrets.GH_PACKAGES_TOKEN }}
         run: |
           set -euo pipefail
           mkdir -p "$RUNNER_TEMP/gov" && cd "$RUNNER_TEMP/gov"