diff --git a/.crow/backfill-flat-safety.yaml b/.crow/backfill-flat-safety.yaml
index e2f850d..e5c9b68 100644
--- a/.crow/backfill-flat-safety.yaml
+++ b/.crow/backfill-flat-safety.yaml
@@ -150,6 +150,14 @@ steps:
         from_secret: PGPASS
       REPO_RO_TOKEN:
         from_secret: REPO_RO_TOKEN
+      # uvr resolves bincraft's dependencies through the GitHub API, including
+      # the pat-s/cranlike@s3 fork. Unauthenticated it is rate limited, and the
+      # failure is not loud: uvr warns, falls back to the registry copy of
+      # cranlike, and the index write then dies on `unused argument (built =
+      # built)` because upstream has no such parameter. Intermittent by nature,
+      # since it depends on the rate-limit window.
+      GITHUB_PAT:
+        from_secret: GITHUB_PAT
       GIT_USER: pat-s
       R_LIBS_USER: /tmp/R-pkgs
       FLAT_SAFETY_ARCH: ${ARCH}
diff --git a/.crow/reindex.yaml b/.crow/reindex.yaml
index 528def4..71bca2c 100644
--- a/.crow/reindex.yaml
+++ b/.crow/reindex.yaml
@@ -151,6 +151,14 @@ steps:
         from_secret: PGPASS
       REPO_RO_TOKEN:
         from_secret: REPO_RO_TOKEN
+      # uvr resolves bincraft's dependencies through the GitHub API, including
+      # the pat-s/cranlike@s3 fork. Unauthenticated it is rate limited, and the
+      # failure is not loud: uvr warns, falls back to the registry copy of
+      # cranlike, and the index write then dies on `unused argument (built =
+      # built)` because upstream has no such parameter. Intermittent by nature,
+      # since it depends on the rate-limit window.
+      GITHUB_PAT:
+        from_secret: GITHUB_PAT
       GIT_USER: pat-s
       R_LIBS_USER: /mnt/cache/R-pkgs
       R_VERSION: ${R_VERSION}
diff --git a/.crow/weekly-rebuild-reindex.yaml b/.crow/weekly-rebuild-reindex.yaml
index 8de71f7..66603e3 100644
--- a/.crow/weekly-rebuild-reindex.yaml
+++ b/.crow/weekly-rebuild-reindex.yaml
@@ -154,6 +154,14 @@ steps:
         from_secret: PGPASS
       REPO_RO_TOKEN:
         from_secret: REPO_RO_TOKEN
+      # uvr resolves bincraft's dependencies through the GitHub API, including
+      # the pat-s/cranlike@s3 fork. Unauthenticated it is rate limited, and the
+      # failure is not loud: uvr warns, falls back to the registry copy of
+      # cranlike, and the index write then dies on `unused argument (built =
+      # built)` because upstream has no such parameter. Intermittent by nature,
+      # since it depends on the rate-limit window.
+      GITHUB_PAT:
+        from_secret: GITHUB_PAT
       GIT_USER: pat-s
       R_LIBS_USER: /mnt/cache/R-pkgs
       R_VERSION: ${R_VERSION}