diff --git a/.github/actions/setup/directories/action.yml b/.github/actions/setup/directories/action.yml
index 2878fa0933..4925154d7a 100644
--- a/.github/actions/setup/directories/action.yml
+++ b/.github/actions/setup/directories/action.yml
@@ -29,6 +29,14 @@ inputs:
     description: >-
       If set to true, additionally runs `make up`.
 
+  checkout:
+    required: false
+    type: boolean
+    default: true
+    description: >-
+      If set to '' (false), skip running actions/checkout. This is useful when
+      you don't want to overwrite a GitHub token that is already set up.
+
   dummy-files:
     required: false
     type: boolean
diff --git a/.github/workflows/check_misc.yml b/.github/workflows/check_misc.yml
index 103c3026c8..ae60dcdd75 100644
--- a/.github/workflows/check_misc.yml
+++ b/.github/workflows/check_misc.yml
@@ -16,14 +16,16 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: ./.github/actions/setup/directories
-        with:
-          makeup: true
-
       - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
         with:
           token: ${{ secrets.MATZBOT_GITHUB_TOKEN }}
 
+      - uses: ./.github/actions/setup/directories
+        with:
+          makeup: true
+          # Skip overwriting MATZBOT_GITHUB_TOKEN
+          checkout: '' # false (ref: https://github.com/actions/runner/issues/2238)
+
       - name: Check if C-sources are US-ASCII
         run: |
           grep -r -n '[^	 -~]' -- *.[chy] include internal win32/*.[ch] && exit 1 || :