diff --git a/.github/workflows/daily-build-with-update.yml b/.github/workflows/daily-build-with-update.yml
index d8e2e9a7d7d2..cc64e1eb92e8 100644
--- a/.github/workflows/daily-build-with-update.yml
+++ b/.github/workflows/daily-build-with-update.yml
@@ -29,6 +29,7 @@ jobs:
     steps:
     - uses: actions/checkout@v4
       with:
+        token: ${{ secrets.PAT }}
         sparse-checkout: 'browser/config/version_display.txt'
     - name: Get Display Version
       id: get
@@ -42,6 +43,7 @@ jobs:
     steps:
     - uses: actions/checkout@v4
       with:
+        token: ${{ secrets.PAT }}
         sparse-checkout: 'browser/config/version.txt'
     - name: Get Inside Version
       id: get
@@ -69,13 +71,17 @@ jobs:
       profgen: true
       aarch64: false
       zstd: true
-
+    secrets:
+      PAT: ${{ secrets.PAT }}
+  
   Part2-win-x86_64-gen-profdata-and-jarlog:
     needs: Part1-win-x86_64-build-with-profgen-zstd
     uses: ./.github/workflows/window-generate-profile-data-and-jarlog.yml
     with:
       browser-artifact-name: floorp-windows-x86_64-build-with-profgen-zstd
       arch: x86_64
+    secrets:
+      PAT: ${{ secrets.PAT }}
 
   Part3-win-x86_64-build-with-profdata-and-jarlog:
     needs: [Part2-win-x86_64-gen-profdata-and-jarlog, get-buildid]
@@ -87,6 +93,8 @@ jobs:
       profdata_jarlog_artifact_name: "floorp-windows-x86_64-profdata-and-jarlog"
       out_artifact_name: please-use-this-floorp-windows-x86_64-package-build-with-profdata-and-jarlog
       MOZ_BUILD_DATE: ${{needs.get-buildid.outputs.buildids}}
+    secrets:
+      PAT: ${{ secrets.PAT }}
 
   Part4-win-x86_64-gen-update-xml:
     needs: [get-display-version, get-buildid, get-inside-version, Part3-win-x86_64-build-with-profdata-and-jarlog]
@@ -135,6 +143,8 @@ jobs:
       beta: true
       mar: true
       MOZ_BUILD_DATE: ${{needs.get-buildid.outputs.buildids}}
+    secrets:
+      PAT: ${{ secrets.PAT }}
 
   Part2-linux-x86_64-gen-update-xml:
     runs-on: 'ubuntu-latest'
@@ -181,10 +191,13 @@ jobs:
       profgen: true
     secrets:
       MACOS_CROSS_TOOLS_KEY: ${{ secrets.MACOS_CROSS_TOOLS_KEY }}
+      PAT: ${{ secrets.PAT }}
 
   Part2-macOS-Universal-gen-profdata-and-jarlog:
     uses: ./.github/workflows/macOS-generate-profile-data-and-jarlog.yml
     needs: Part1-macOS-Universal-build-with-profgen
+    secrets:
+      PAT: ${{ secrets.PAT }}
 
   Part3-macOS-Universal-build-with-profdata-and-jarlog:
     uses: ./.github/workflows/macOS-Universal.yml
@@ -195,6 +208,7 @@ jobs:
       MOZ_BUILD_DATE: ${{needs.get-buildid.outputs.buildids}}
     secrets:
       MACOS_CROSS_TOOLS_KEY: ${{ secrets.MACOS_CROSS_TOOLS_KEY }}
+      PAT: ${{ secrets.PAT }}
 
   Part4-macOS-Universal-package-and-sign:
     uses: ./.github/workflows/macOS-integration.yml
@@ -214,6 +228,7 @@ jobs:
       macOS_AppleAccountId: ${{ secrets.macOS_AppleAccountId }}
       macOS_AppleTeamId: ${{ secrets.macOS_AppleTeamId }}
       macOS_AppleAccountAppSpecificPassword: ${{ secrets.macOS_AppleAccountAppSpecificPassword }}
+      PAT: ${{ secrets.PAT }}
 
 ##################################################################### Deployments #######################################################################################################
   Deployments:
diff --git a/.github/workflows/deployments.yml b/.github/workflows/deployments.yml
index 12c3d1c46e35..d1075ee2c6b5 100644
--- a/.github/workflows/deployments.yml
+++ b/.github/workflows/deployments.yml
@@ -36,6 +36,7 @@ jobs:
     steps:
     - uses: actions/checkout@v4
       with:
+        token: ${{ secrets.PAT }}
         sparse-checkout: 'browser/config/version_display.txt'
     - name: Get Display Version
       id: get
@@ -49,6 +50,7 @@ jobs:
     steps:
     - uses: actions/checkout@v4
       with:
+        token: ${{ secrets.PAT }}
         sparse-checkout: 'browser/config/version.txt'
     - name: Get Inside Version
       id: get
@@ -77,6 +79,8 @@ jobs:
       profgen: true
       aarch64: false
       zstd: true
+    secrets:
+      PAT: ${{ secrets.PAT }}
 
   Part2-win-x86_64-gen-profdata-and-jarlog:
     needs: Part1-win-x86_64-build-with-profgen-zstd
@@ -84,6 +88,8 @@ jobs:
     with:
       browser-artifact-name: floorp-windows-x86_64-build-with-profgen-zstd
       arch: x86_64
+    secrets:
+      PAT: ${{ secrets.PAT }}
 
   Part3-win-x86_64-build-with-profdata-and-jarlog:
     needs: [Part2-win-x86_64-gen-profdata-and-jarlog, get-buildid]
@@ -96,6 +102,8 @@ jobs:
       MOZ_BUILD_DATE: ${{needs.get-buildid.outputs.buildids}}
       release-note-url: ${{ inputs.release-note-url }}
       release-note-url-ja: ${{ inputs.release-note-url-ja }}
+    secrets:
+      PAT: ${{ secrets.PAT }}
 
 ################################################################ ↑ Windows x86_64 Build ###################################################################################
 
@@ -106,6 +114,8 @@ jobs:
       aarch64: false
       build32bit: true
       zstd: true
+    secrets:
+      PAT: ${{ secrets.PAT }}
 
   Part2-win-x86-gen-profdata-and-jarlog:
     needs: Part1-win-x86-build-with-profgen-zstd
@@ -113,7 +123,9 @@ jobs:
     with:
       browser-artifact-name: floorp-windows-x86-build-with-profgen-zstd
       arch: x86
-
+    secrets:
+      PAT: ${{ secrets.PAT }}
+  
   Part3-win-x86-build-with-profdata-and-jarlog:
     needs: [get-buildid, Part2-win-x86-gen-profdata-and-jarlog]
     uses: ./.github/workflows/windows-build.yml
@@ -125,6 +137,8 @@ jobs:
       MOZ_BUILD_DATE: ${{needs.get-buildid.outputs.buildids}}
       release-note-url: ${{ inputs.release-note-url }}
       release-note-url-ja: ${{ inputs.release-note-url-ja }}
+    secrets:
+      PAT: ${{ secrets.PAT }}
 
 ################################################################ ↑ Windows x86 Build ####################################################################################
 
@@ -138,6 +152,8 @@ jobs:
       MOZ_BUILD_DATE: ${{needs.get-buildid.outputs.buildids}}
       release-note-url: ${{ inputs.release-note-url }}
       release-note-url-ja: ${{ inputs.release-note-url-ja }}
+    secrets:
+      PAT: ${{ secrets.PAT }}
 
 ################################################################ ↑ Linux x86_64 Build ####################################################################################
   Part1-linux-aarch64-build:
@@ -150,6 +166,8 @@ jobs:
       MOZ_BUILD_DATE: ${{needs.get-buildid.outputs.buildids}}
       release-note-url: ${{ inputs.release-note-url }}
       release-note-url-ja: ${{ inputs.release-note-url-ja }}
+    secrets:
+      PAT: ${{ secrets.PAT }}
 
 ################################################ ↑ Linux AArch64 Build ################################################
 
@@ -161,10 +179,13 @@ jobs:
       profgen: true
     secrets:
       MACOS_CROSS_TOOLS_KEY: ${{ secrets.MACOS_CROSS_TOOLS_KEY }}
+      PAT: ${{ secrets.PAT }}
 
   Part2-macOS-Universal-gen-profdata-and-jarlog:
     needs: Part1-macOS-Universal-build-with-profgen
     uses: ./.github/workflows/macOS-generate-profile-data-and-jarlog.yml
+    secrets:
+      PAT: ${{ secrets.PAT }}
 
   Part3-macOS-Universal-build-with-profdata-and-jarlog:
     uses: ./.github/workflows/macOS-Universal.yml
@@ -177,6 +198,7 @@ jobs:
       release-note-url-ja: ${{ inputs.release-note-url-ja }}
     secrets:
       MACOS_CROSS_TOOLS_KEY: ${{ secrets.MACOS_CROSS_TOOLS_KEY }}
+      PAT: ${{ secrets.PAT }}
 
   Part4-macOS-Universal-package-and-sign:
     uses: ./.github/workflows/macOS-integration.yml
@@ -196,6 +218,7 @@ jobs:
       macOS_AppleAccountId: ${{ secrets.macOS_AppleAccountId }}
       macOS_AppleTeamId: ${{ secrets.macOS_AppleTeamId }}
       macOS_AppleAccountAppSpecificPassword: ${{ secrets.macOS_AppleAccountAppSpecificPassword }}
+      PAT: ${{ secrets.PAT }}
 
 ####################################################################### macOS Universal #######################################################################
 
diff --git a/.github/workflows/linux-build.yml b/.github/workflows/linux-build.yml
index 6f22f7be01e8..83285a1edeaa 100644
--- a/.github/workflows/linux-build.yml
+++ b/.github/workflows/linux-build.yml
@@ -41,6 +41,10 @@ on:
       release-note-url-ja:
         type: string
         required: false
+    secrets:
+      PAT:
+        description: "Personal Access Token for checkout"
+        required: true
     outputs:
       mar_name:
         value: ${{jobs.linux-build.outputs.mar_name}}
@@ -62,6 +66,7 @@ jobs:
     - uses: actions/checkout@v4
       name: Clone 🧬
       with:
+        token: ${{ secrets.PAT }}
         submodules: 'recursive'
 
     - name: Change PPA mirror servers
diff --git a/.github/workflows/linux-x64-deb.yml b/.github/workflows/linux-x64-deb.yml
index 480129df8dc0..cd9582e1f924 100644
--- a/.github/workflows/linux-x64-deb.yml
+++ b/.github/workflows/linux-x64-deb.yml
@@ -29,6 +29,8 @@ jobs:
     steps:
     - name: Checkout 🛎️
       uses: actions/checkout@v4
+      with:
+        submodules: 'recursive'
 
     - name: Change PPA mirror servers
       run: |
diff --git a/.github/workflows/macOS-Universal.yml b/.github/workflows/macOS-Universal.yml
index e4e15e2d846f..fda8d2c0bcaf 100644
--- a/.github/workflows/macOS-Universal.yml
+++ b/.github/workflows/macOS-Universal.yml
@@ -42,6 +42,9 @@ on:
       MACOS_CROSS_TOOLS_KEY:
         description: macOS cross tools 7z password
         required: true
+      PAT:
+        description: "Personal Access Token"
+        required: true
   workflow_dispatch:
     inputs:
       profgen:
@@ -95,6 +98,7 @@ jobs:
       name: Clone 🧬
       with:
         submodules: 'recursive'
+        token: ${{ secrets.PAT }}
 
     - name: Setup Disk & Swap Space 💿
       run: |
diff --git a/.github/workflows/macOS-generate-profile-data-and-jarlog.yml b/.github/workflows/macOS-generate-profile-data-and-jarlog.yml
index 1b955ae127ee..a5687e12a7ef 100644
--- a/.github/workflows/macOS-generate-profile-data-and-jarlog.yml
+++ b/.github/workflows/macOS-generate-profile-data-and-jarlog.yml
@@ -7,6 +7,10 @@
 
 on:
     workflow_call:
+      secrets:
+        PAT:
+          description: "Personal Access Token for checkout"
+          required: true
     workflow_dispatch:
 jobs:
   macOS-Universal-gen-profdata-and-jarlog:
@@ -27,6 +31,7 @@ jobs:
         name: Clone 🧬
         with:
           submodules: 'recursive'
+          token: ${{ secrets.PAT }}
 
       - name: Check Arch type
         shell: bash
diff --git a/.github/workflows/macOS-integration.yml b/.github/workflows/macOS-integration.yml
index 638c81a7a55f..407f04f9a89e 100644
--- a/.github/workflows/macOS-integration.yml
+++ b/.github/workflows/macOS-integration.yml
@@ -54,6 +54,9 @@ on:
         macOS_AppleAccountAppSpecificPassword:
             description: "macOS AppleAccountAppSpecificPassword"
             required: true
+        PAT:
+            description: "Personal Access Token"
+            required: true
 
   workflow_dispatch:
     inputs:
@@ -90,6 +93,7 @@ jobs:
           uses: actions/checkout@v4
           with:
             submodules: 'recursive'
+            token: ${{ secrets.PAT }}
 
         - name: download M1 build artifact 📥
           uses: actions/download-artifact@v4
diff --git a/.github/workflows/window-generate-profile-data-and-jarlog.yml b/.github/workflows/window-generate-profile-data-and-jarlog.yml
index ad1d1b07d9a4..b224bf3e358b 100644
--- a/.github/workflows/window-generate-profile-data-and-jarlog.yml
+++ b/.github/workflows/window-generate-profile-data-and-jarlog.yml
@@ -18,6 +18,10 @@ on:
           required: true
           default: 'x86_64'
           type: string
+      secrets:
+        PAT:
+          description: "Personal Access Token"
+          required: true
     workflow_dispatch:
       inputs:
         browser-artifact:
@@ -50,7 +54,8 @@ jobs:
         - uses: actions/checkout@v4
           name: Clone 🧬
           with:
-            submodules: 'recursive'    
+            submodules: 'recursive'
+            token: ${{ secrets.PAT }}
 
         - name: Setup 🪛
           run: |
diff --git a/.github/workflows/windows-build.yml b/.github/workflows/windows-build.yml
index 6aa4b95be727..6db24de33994 100644
--- a/.github/workflows/windows-build.yml
+++ b/.github/workflows/windows-build.yml
@@ -63,7 +63,10 @@ on:
         value: ${{jobs.win-build.outputs.mar_name}}
       mar_size:
         value: ${{jobs.win-build.outputs.mar_size}}
-
+    secrets:
+      PAT:
+        description: "Personal Access Token"
+        required: true
 jobs:
   win-build:
     runs-on: ubuntu-latest
@@ -117,6 +120,7 @@ jobs:
       name: Clone 🧬
       with:
         submodules: 'recursive'
+        token: ${{ secrets.PAT }}
 
     - name: Setup Disk & Swap Space 💿
       run: |
diff --git a/.github/workflows/wrapper_linux-build.yml b/.github/workflows/wrapper_linux-build.yml
index 5c92808c5aa2..79fa3a4c9821 100644
--- a/.github/workflows/wrapper_linux-build.yml
+++ b/.github/workflows/wrapper_linux-build.yml
@@ -24,3 +24,5 @@ jobs:
     uses: ./.github/workflows/linux-build.yml
     with:
       aarch64: ${{inputs.aarch64}}
+    secrets:
+        PAT: ${{ secrets.PAT }}
diff --git a/.github/workflows/wrapper_windows-build.yml b/.github/workflows/wrapper_windows-build.yml
index e24a192d4bcb..f89787c8ff48 100644
--- a/.github/workflows/wrapper_windows-build.yml
+++ b/.github/workflows/wrapper_windows-build.yml
@@ -32,3 +32,5 @@ jobs:
       profgen: ${{inputs.profgen}}
       aarch64: ${{inputs.aarch64}}
       build32bit: ${{inputs.bit-32}}
+    secrets:
+      PAT: ${{ secrets.PAT }}