diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 9bbedd0..382fc5a 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -11,9 +11,18 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 60
     steps:
+    - uses: actions/checkout@v4
+
     - uses: actions/checkout@v4
       with:
-        submodules: true
+        repository: commaai/agnos-firmware
+        path: agnos-firmware
+        token: ${{ secrets.SUBMODULE_TOKEN }}
+        persist-credentials: true
+
+    - name: checkout submodule ref
+      run: git submodule update --init
+
     - uses: actions/setup-python@v5
       with:
         python-version: '3.11'