diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 8fe0762360..8108c694df 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -264,11 +264,12 @@ jobs:
     if: fromJSON(github.run_attempt) < 2
     runs-on: ubuntu-latest
     steps:
-      - env:
+      - name: Start rerun workflow
+        env:
           GH_REPO: ${{ github.repository }}
-          GH_TOKEN: ${{ github.token }}
+          GH_TOKEN: ${{ secrets.github_token }}
           GH_DEBUG: api
         run: |
-            gh workflow run retry_build.yml |
-            --ref ${{ github.ref_name }} |
+            gh workflow run retry_build.yml \
+            --ref ${{ github.ref_name }} \
             -F run_id=${{ github.run_id }}
diff --git a/.github/workflows/retry_build.yml b/.github/workflows/retry_build.yml
index 13ce77e28b..6c0480fcc5 100644
--- a/.github/workflows/retry_build.yml
+++ b/.github/workflows/retry_build.yml
@@ -6,6 +6,7 @@ on:
         required: true
 jobs:
   rerun-on-failure:
+    permissions: write-all
     runs-on: ubuntu-latest
     steps:
       - name: rerun ${{ inputs.run_id }}