diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index f778e52620..fcbc016b4c 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -5,6 +5,7 @@ name: Publish Docker image dependencies
 # We only want to build on releases; this condition is 100% stolen from the
 # goreleaser action.
 on:
+  workflow_dispatch:
   push:
     tags:
       - "*"
diff --git a/.github/workflows/go-ci.yml b/.github/workflows/go-ci.yml
index fc0fe69ad0..fafe948376 100644
--- a/.github/workflows/go-ci.yml
+++ b/.github/workflows/go-ci.yml
@@ -1,7 +1,11 @@
 name: Go CI
 
 on:
-  - push
+  workflow_dispatch:
+  push:
+env:
+  GOPRIVATE: "github.com/sourcegraph/*"
+  PRIVATE_TOKEN: "${{ secrets.PRIVATE_SG_ACCESS_TOKEN }}"
 
 jobs:
   go-test:
diff --git a/.github/workflows/go-lint.yml b/.github/workflows/go-lint.yml
index ab0f04b8b0..c394ce0f97 100644
--- a/.github/workflows/go-lint.yml
+++ b/.github/workflows/go-lint.yml
@@ -1,7 +1,11 @@
 name: Go Lint
 
 on:
-  - push
+  workflow_dispatch:
+  push:
+env:
+  GOPRIVATE: "github.com/sourcegraph/*"
+  PRIVATE_TOKEN: "${{ secrets.PRIVATE_SG_ACCESS_TOKEN }}"
 
 jobs:
   go-lint:
diff --git a/.github/workflows/goreleaser-check.yml b/.github/workflows/goreleaser-check.yml
index cd8e72d671..080a9dc320 100644
--- a/.github/workflows/goreleaser-check.yml
+++ b/.github/workflows/goreleaser-check.yml
@@ -3,6 +3,9 @@ name: GoReleaser check
 on:
   push:
   workflow_dispatch:
+env:
+  GOPRIVATE: "github.com/sourcegraph/*"
+  PRIVATE_TOKEN: "${{ secrets.PRIVATE_SG_ACCESS_TOKEN }}"
 
 jobs:
   goreleaser:
diff --git a/.github/workflows/goreleaser.yml b/.github/workflows/goreleaser.yml
index 1924ffcd94..75ef436158 100644
--- a/.github/workflows/goreleaser.yml
+++ b/.github/workflows/goreleaser.yml
@@ -1,9 +1,13 @@
 name: Build and Release
 
 on:
+  workflow_dispatch:
   push:
     tags:
       - '*'
+env:
+  GOPRIVATE: "github.com/sourcegraph/*"
+  PRIVATE_TOKEN: "${{ secrets.PRIVATE_SG_ACCESS_TOKEN }}"
 
 # There are two cases where this GitHub action will run:
 #
diff --git a/.github/workflows/scip.yml b/.github/workflows/scip.yml
index d2bbd16208..c7a01d2342 100644
--- a/.github/workflows/scip.yml
+++ b/.github/workflows/scip.yml
@@ -1,6 +1,10 @@
 name: SCIP
-'on':
-  - push
+on:
+  workflow_dispatch:
+  push:
+env:
+  GOPRIVATE: "github.com/sourcegraph/*"
+  PRIVATE_TOKEN: "${{ secrets.PRIVATE_SG_ACCESS_TOKEN }}"
 jobs:
   scip-go:
     runs-on: ubuntu-latest