diff --git a/.github/workflows/integration.yml b/.github/workflows/integration.yml
index b3e89fd..4d99e67 100644
--- a/.github/workflows/integration.yml
+++ b/.github/workflows/integration.yml
@@ -29,6 +29,8 @@ jobs:
           go-version: '1.25.x'
 
       - name: Run Dagger Integration Pipeline
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           go run ci/main.go --os ${{ matrix.os }}
 
diff --git a/ci/main.go b/ci/main.go
index 2e5308e..ad14491 100644
--- a/ci/main.go
+++ b/ci/main.go
@@ -88,6 +88,14 @@ func main() {
 				WithFile("/usr/local/bin/bootstrap_environment", binaryFile).
 				WithWorkdir("/tmp")
 
+			// Forward GitHub token so API calls are authenticated (avoids 403 rate-limits)
+			if tok := os.Getenv("GITHUB_TOKEN"); tok != "" {
+				secret := client.SetSecret("github-token", tok)
+				testContainer = testContainer.
+					WithSecretVariable("GITHUB_TOKEN", secret).
+					WithSecretVariable("GH_TOKEN", secret)
+			}
+
 			// 4. Run bootstrap binary with safe args: --only custom --no-vm --no-ai
 			// We pipe 'y' to satisfy the "Proceed? [y/N]" prompt.
 			fmt.Printf("[%s] Executing bootstrap_environment...\n", target)