diff --git a/.github/workflows/sync-secrets.yml b/.github/workflows/sync-secrets.yml
new file mode 100644
index 00000000000..27b22c53c0e
--- /dev/null
+++ b/.github/workflows/sync-secrets.yml
@@ -0,0 +1,32 @@
+name: Sync Secrets
+
+on:
+  workflow_dispatch:
+    inputs:
+      dry_run:
+        description: 'Dry Run'
+        required: true
+        default: 'true'
+        type: choice
+        options:
+          - 'true'
+          - 'false'
+
+jobs:
+  sync-secrets:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v2
+      - name: Sync Secrets
+        uses: jpoehnelt/secrets-sync-action@v1.9.0
+        with:
+          SECRETS: |
+            ^NPM_AUTH_TOKEN$
+          REPOSITORIES: |
+            ^spinnaker/spinnaker$
+          DRY_RUN: ${{ github.event.inputs.dry_run }}
+          GITHUB_TOKEN: ${{ secrets.SYNC_TOKEN }}
+        env:
+          NPM_AUTH_TOKEN: ${{ secrets.NPM_AUTH_TOKEN }}
+