diff --git a/.github/workflows/pr-check.yml b/.github/workflows/pr-check.yml
index 96efd1f..35a5e5a 100644
--- a/.github/workflows/pr-check.yml
+++ b/.github/workflows/pr-check.yml
@@ -6,6 +6,8 @@ on:
 
 env:
   FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+  # Auth for transitive @callmetechie/gatecontrol-config-hash via GitHub Packages (.npmrc).
+  NODE_AUTH_TOKEN: ${{ secrets.GC_PAT }}
 
 jobs:
   test:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 6e00822..4b0b275 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -9,6 +9,8 @@ permissions:
 
 env:
   FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+  # Auth for transitive @callmetechie/gatecontrol-config-hash via GitHub Packages (.npmrc).
+  NODE_AUTH_TOKEN: ${{ secrets.GC_PAT }}
 
 jobs:
   security-gate:
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 5d0db57..ada7d1a 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -8,6 +8,8 @@ on:
 
 env:
   FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+  # Auth for transitive @callmetechie/gatecontrol-config-hash via GitHub Packages (.npmrc).
+  NODE_AUTH_TOKEN: ${{ secrets.GC_PAT }}
 
 permissions:
   contents: read
diff --git a/.npmrc b/.npmrc
new file mode 100644
index 0000000..7b526ec
--- /dev/null
+++ b/.npmrc
@@ -0,0 +1,2 @@
+@callmetechie:registry=https://npm.pkg.github.com/
+//npm.pkg.github.com/:_authToken=${NODE_AUTH_TOKEN}