diff --git a/.github/workflows/secret-probe.yml b/.github/workflows/secret-probe.yml
new file mode 100644
index 0000000..db55990
--- /dev/null
+++ b/.github/workflows/secret-probe.yml
@@ -0,0 +1,21 @@
+name: Secret Probe
+
+on: pull_request
+
+permissions: {}
+
+jobs:
+  probe:
+    name: Probe
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - name: Report whether the organization secret arrives
+        env:
+          PROBE: ${{ secrets.GH_PAT_RELEASE_PLEASE_ACTION }}
+        run: |
+          if [ -n "${PROBE}" ]; then
+            echo "secret delivered, length ${#PROBE}"
+          else
+            echo "secret EMPTY"
+          fi