diff --git a/.github/workflows/ci-main-pull-request.yml b/.github/workflows/ci-main-pull-request.yml
index f02b93f..cd76bb0 100644
--- a/.github/workflows/ci-main-pull-request.yml
+++ b/.github/workflows/ci-main-pull-request.yml
@@ -983,6 +983,17 @@ jobs:
         uses: ruby/setup-ruby@v1
         with:
           ruby-version: '3.4'
+          bundler-cache: false
+
+      - name: Configure Bundler for private Ruby gems
+        if: ${{ inputs.language == 'ruby' && inputs.build-profile == 'cli' }}
+        run: |
+          if [ -z "${{ secrets.PRIVATE_ACCESS_KITCHEN_CHEF_ENTERPRISE }}" ]; then
+            echo "Skipping: PRIVATE_ACCESS_KITCHEN_CHEF_ENTERPRISE secret not configured or not in scope"
+            exit 0
+          fi
+          bundle config set --local github.com "x-access-token:${{ secrets.PRIVATE_ACCESS_KITCHEN_CHEF_ENTERPRISE }}"
+
       - name: 'Ruby build'
         if: ${{ inputs.language == 'ruby' && inputs.build-profile == 'cli' }}
         continue-on-error: true
diff --git a/.github/workflows/sbom.yml b/.github/workflows/sbom.yml
index b849a8e..f57bdcc 100644
--- a/.github/workflows/sbom.yml
+++ b/.github/workflows/sbom.yml
@@ -241,6 +241,15 @@ jobs:
           bundler-cache: false
           working-directory: ${{ inputs.ruby-app-directory != '' && inputs.ruby-app-directory || '.' }}
 
+      - name: Configure Bundler for private Ruby gems
+        if: ${{ inputs.run-bundle-install == true && inputs.language == 'ruby' }}
+        run: |
+          if [ -z "${{ secrets.PRIVATE_ACCESS_KITCHEN_CHEF_ENTERPRISE }}" ]; then
+            echo "Skipping: PRIVATE_ACCESS_KITCHEN_CHEF_ENTERPRISE secret not configured or not in scope"
+            exit 0
+          fi
+          bundle config set --local github.com "x-access-token:${{ secrets.PRIVATE_ACCESS_KITCHEN_CHEF_ENTERPRISE }}"
+
       - name: Set up Erlang/OTP and rebar3
         if: inputs.language == 'erlang'
         uses: erlef/setup-beam@v1