diff --git a/.github/workflows/component-release-finish-on-approval.yml b/.github/workflows/component-release-finish-on-approval.yml
index 27720f6f..b414972f 100755
--- a/.github/workflows/component-release-finish-on-approval.yml
+++ b/.github/workflows/component-release-finish-on-approval.yml
@@ -23,7 +23,7 @@ jobs:
     env:
       REPO: ${{ github.repository }}
       ACTOR: ${{ github.event.review.user.login }}
-      GH_TOKEN: ${{ secrets.RDKCM_RDKE }}
+      GH_TOKEN: ${{ github.token }}
       RELEASE_BRANCH: ${{ github.event.pull_request.head.ref }}
 
     steps:
diff --git a/.github/workflows/component-release-workflow-usage.md b/.github/workflows/component-release-workflow-usage.md
index 2c62d0e3..9341e5e6 100755
--- a/.github/workflows/component-release-workflow-usage.md
+++ b/.github/workflows/component-release-workflow-usage.md
@@ -62,7 +62,13 @@ Triggered on approved review for `release/*` PRs targeting `develop`.
 Both workflows use:
 
 - `RDKCM_DEPLOY_KEY`: SSH private key used by checkout and git push operations.
-- `RDKCM_RDKE`: token used by `gh` API/CLI calls.
+- `github.token`: built-in GitHub Actions token used by `gh` API/CLI calls.
+
+Why `github.token`:
+
+- It is automatically provided for each workflow run.
+- It avoids introducing a custom repository secret for API access.
+- It works with the workflow permissions already declared in these jobs.
 
 ## Failure Cleanup Safety
 
diff --git a/.github/workflows/component-release.yml b/.github/workflows/component-release.yml
index 01913c2b..a0963aa2 100755
--- a/.github/workflows/component-release.yml
+++ b/.github/workflows/component-release.yml
@@ -44,7 +44,7 @@ jobs:
       SOURCE_BRANCH: ${{ github.event.inputs.source_branch }}
       REPO: ${{ github.repository }}
       ACTOR: ${{ github.actor }}
-      GH_TOKEN: ${{ secrets.RDKCM_RDKE }}
+      GH_TOKEN: ${{ github.token }}
 
     steps:
       - name: Validate version format