diff --git a/.gitea/workflows/docker-build-push.yml b/.gitea/workflows/docker-build-push.yml
index 106c297..39c650b 100644
--- a/.gitea/workflows/docker-build-push.yml
+++ b/.gitea/workflows/docker-build-push.yml
@@ -41,7 +41,13 @@ jobs:
 
       - name: Validate Image Verify Metadata
         run: |
+          if [ -z "${FIXED_TOKEN:-}" ]; then
+            echo "FIXED_TOKEN is not configured on runner"
+            exit 1
+          fi
+
           if ! response="$(curl --silent --show-error --location --get 'https://modelhub.org.cn/adminApi/image-verify/validate' \
+            --header "Xc-Token: ${FIXED_TOKEN}" \
             --data-urlencode "gpuType=${GPU_TYPE:-}" \
             --data-urlencode "taskType=${TASK_TYPE:-}")"; then
             echo "failed to call image verify validate API"