diff --git a/taskcluster/kinds/push-image/kind.yml b/taskcluster/kinds/push-image/kind.yml
index 1f98f3741..48dfc8704 100644
--- a/taskcluster/kinds/push-image/kind.yml
+++ b/taskcluster/kinds/push-image/kind.yml
@@ -24,6 +24,8 @@ task-defaults:
             - artifact: image.tar.zst
               extract: false
     run-on-tasks-for: ["github-release"]
+    scopes:
+        - secrets:get:project/taskgraph/level-3/dockerhub
     worker-type: images
     worker:
         docker-image: {"in-tree": "skopeo"}