diff --git a/.gitea/workflows/build.yaml b/.gitea/workflows/build.yaml
index 03f5f74..044e399 100644
--- a/.gitea/workflows/build.yaml
+++ b/.gitea/workflows/build.yaml
@@ -90,6 +90,7 @@ jobs:
         if: github.event_name != 'pull_request'
         env:
           COSIGN_PRIVATE_KEY: ${{ secrets.COSIGN_PRIVATE_KEY }}
+          COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD }}
         run: |
           set -xeuo pipefail
           export STORAGE_DRIVER=vfs