diff --git a/.github/workflows/add-to-project.yml b/.github/workflows/add-to-project.yml
index 562cd9c..b7d9bfc 100644
--- a/.github/workflows/add-to-project.yml
+++ b/.github/workflows/add-to-project.yml
@@ -2,6 +2,11 @@ name: Reusable - Add to Rossoctl Project
 
 on:
   workflow_call:
+    # Declared so a caller can pass this one secret by name, in place of
+    # `secrets: inherit`, which passes every secret of the calling repo.
+    secrets:
+      ADD_TO_PROJECT_PAT:
+        required: false
 
 jobs:
   add-to-project: