diff --git a/.github/workflows/build_debian_src.yml b/.github/workflows/build_debian_src.yml
index bae3e442d..cc93b5748 100644
--- a/.github/workflows/build_debian_src.yml
+++ b/.github/workflows/build_debian_src.yml
@@ -1,6 +1,10 @@
 name: Build Debian Source Package
 
-on: workflow_call
+on:
+  workflow_call:
+    secrets:
+      PPA_GPG_PRIVATE_KEY:
+        required: true
 
 permissions:
   contents: write
diff --git a/.github/workflows/main_matrix.yml b/.github/workflows/main_matrix.yml
index 9685ff91f..f4c5de228 100644
--- a/.github/workflows/main_matrix.yml
+++ b/.github/workflows/main_matrix.yml
@@ -130,6 +130,7 @@ jobs:
 
   package-ppa:
     uses: ./.github/workflows/package_ppa.yml
+    secrets: inherit
 
   package-raspbian:
     uses: ./.github/workflows/package_raspbian.yml
diff --git a/.github/workflows/package_ppa.yml b/.github/workflows/package_ppa.yml
index 284048466..1fcc96e11 100644
--- a/.github/workflows/package_ppa.yml
+++ b/.github/workflows/package_ppa.yml
@@ -2,6 +2,9 @@ name: Package Launchpad PPA
 
 on:
   workflow_call:
+    secrets:
+      PPA_GPG_PRIVATE_KEY:
+        required: true
   workflow_dispatch:
 
 permissions:
@@ -11,6 +14,7 @@ permissions:
 jobs:
   build-debian-src:
     uses: ./.github/workflows/build_debian_src.yml
+    secrets: inherit
 
   package-ppa:
     runs-on: ubuntu-24.04