diff --git a/.github/workflows/brakeman.yml b/.github/workflows/brakeman.yml
index 5e4465f0e..201ef00c8 100644
--- a/.github/workflows/brakeman.yml
+++ b/.github/workflows/brakeman.yml
@@ -2,6 +2,10 @@ name: Run Brakeman
 
 on:
   workflow_call:
+    secrets:
+      BUNDLER_GITHUB_TOKEN:
+        required: false
+        description: "Token used for Bundler to authenticate when installing gems from private Github repos"
 
 jobs:
   run-brakeman:
@@ -19,6 +23,8 @@ jobs:
       - uses: ruby/setup-ruby@v1
         with:
           bundler-cache: true
+        env:
+          BUNDLE_GITHUB__COM: "x-access-token:${{ secrets.BUNDLER_GITHUB_TOKEN }}"
 
       - name: Run Brakeman
         run: |
diff --git a/.github/workflows/erblint.yml b/.github/workflows/erblint.yml
index 3a880de67..10a1fe9a1 100644
--- a/.github/workflows/erblint.yml
+++ b/.github/workflows/erblint.yml
@@ -2,6 +2,10 @@ name: Run Erb Lint
 
 on:
   workflow_call:
+    secrets:
+      BUNDLER_GITHUB_TOKEN:
+        required: false
+        description: "Token used for Bundler to authenticate when installing gems from private Github repos"
 
 jobs:
   run-erblint:
@@ -16,6 +20,8 @@ jobs:
         uses: ruby/setup-ruby@v1
         with:
           bundler-cache: true
+        env:
+          BUNDLE_GITHUB__COM: "x-access-token:${{ secrets.BUNDLER_GITHUB_TOKEN }}"
 
       - name: Run ErbLint
         run: bundle exec erblint --lint-all
diff --git a/.github/workflows/jasmine.yml b/.github/workflows/jasmine.yml
index 055b21d68..dd492d4c4 100644
--- a/.github/workflows/jasmine.yml
+++ b/.github/workflows/jasmine.yml
@@ -8,6 +8,10 @@ on:
         required: false
         default: false
         type: boolean
+    secrets:
+      BUNDLER_GITHUB_TOKEN:
+        required: false
+        description: "Token used for Bundler to authenticate when installing gems from private Github repos"
 
 jobs:
   run-jasmine:
@@ -24,6 +28,8 @@ jobs:
         uses: ruby/setup-ruby@v1
         with:
           bundler-cache: true
+        env:
+          BUNDLE_GITHUB__COM: "x-access-token:${{ secrets.BUNDLER_GITHUB_TOKEN }}"
 
       - name: Setup Node
         uses: alphagov/govuk-infrastructure/.github/actions/setup-node@main