diff --git a/.github/workflows/build_upload.yml b/.github/workflows/build_upload.yml
index c04c1d2e33..c25342572f 100644
--- a/.github/workflows/build_upload.yml
+++ b/.github/workflows/build_upload.yml
@@ -11,3 +11,13 @@ jobs:
     with:
       bin_name: 'venus'
       has_ffi: true
+    secrets:
+      OSS_KEY_ID: ${{secrets.OSS_KEY_ID}}
+      OSS_KEY_SECRET: ${{secrets.OSS_KEY_SECRET}}
+      OSS_ENDPOINT: ${{secrets.OSS_ENDPOINT}}
+      OSS_BUCKET: ${{secrets.OSS_BUCKET}}
+      FTP_HOST: ${{secrets.FTP_HOST}}
+      FTP_USER: ${{secrets.FTP_USER}}
+      FTP_PWD: ${{secrets.FTP_PWD}}
+      GODEYE_URL: ${{secrets.GODEYE_URL}}
+      token: ${{github.token}}
diff --git a/.github/workflows/common_build_upload.yml b/.github/workflows/common_build_upload.yml
index 36749c9b41..067542f2f6 100644
--- a/.github/workflows/common_build_upload.yml
+++ b/.github/workflows/common_build_upload.yml
@@ -8,6 +8,21 @@ on:
         type: string
       has_ffi:
         type: boolean
+    secrets:
+      OSS_KEY_ID:
+      OSS_KEY_SECRET:
+      OSS_ENDPOINT:
+      OSS_BUCKET:
+      FTP_HOST:
+        required: true
+      FTP_USER:
+        required: true
+      FTP_PWD:
+        required: true
+      GODEYE_URL:
+        required: true
+      token:
+        required: true
 
 jobs:
 
@@ -145,7 +160,7 @@ jobs:
           artifacts: ${{steps.vars.outputs.artifact_name}}
           tag: ${{ steps.vars.outputs.github_tag }}
           commit: ${{ steps.vars.outputs.commit }}
-          token: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ secrets.token }}
 
       - name: upload ftp
         id: uploadftp
diff --git a/.github/workflows/common_docker_image.yml b/.github/workflows/common_docker_image.yml
index 011a7be310..00e339b042 100644
--- a/.github/workflows/common_docker_image.yml
+++ b/.github/workflows/common_docker_image.yml
@@ -3,6 +3,9 @@ name: Reuse Docker Image CI
 on:
 
   workflow_call:
+    secrets:
+      DOCKER_PASSWORD:
+        required: true
 
 jobs:
 
@@ -37,6 +40,7 @@ jobs:
         echo github_tag = ${{ steps.vars.outputs.github_tag }}
         echo repo_name = ${{ steps.vars.outputs.repo_name }}
         echo docker_user_name = ${{steps.vars.outputs.docker_user_name}}
+        echo docker_password = ${{secrets.DOCKER_PASSWORD}}
 
     - name: Build the Docker image
       if: ${{ steps.vars.outputs.is_tag_create == 'true' }}
diff --git a/.github/workflows/docker_image.yml b/.github/workflows/docker_image.yml
index 15de95653b..b8ac374db7 100644
--- a/.github/workflows/docker_image.yml
+++ b/.github/workflows/docker_image.yml
@@ -9,3 +9,5 @@ jobs:
 
   build_docker_image:
     uses: ./.github/workflows/common_docker_image.yml
+    secrets:
+      DOCKER_PASSWORD: ${{secrets.DOCKER_PASSWORD}}