diff --git a/.woodpecker/release.yml b/.woodpecker/release.yml
index fe9f712..c5846cc 100644
--- a/.woodpecker/release.yml
+++ b/.woodpecker/release.yml
@@ -92,10 +92,12 @@ steps:
   # Create git tag and push
   - name: git-tag
     image: alpine/git
-    secrets: [github_token]
+    environment:
+      GITHUB_TOKEN:
+        from_secret: github_token
     commands:
-      - echo "Token length ${#GITHUB_TOKEN}"
-      - TAG=$(cat .tag) && VERSION=$(cat .version) && echo "Creating tag $TAG for version $VERSION" && git config user.email "ci@woodpecker.local" && git config user.name "Woodpecker CI" && git remote set-url origin "https://x-access-token:${GITHUB_TOKEN}@github.com/barryw/PaperlessMCP.git" && git tag -a "$TAG" -m "Release $VERSION" && git push origin "$TAG"
+      - echo "Token length $${#GITHUB_TOKEN}"
+      - TAG=$$(cat .tag) && VERSION=$$(cat .version) && echo "Creating tag $$TAG for version $$VERSION" && git config user.email "ci@woodpecker.local" && git config user.name "Woodpecker CI" && git remote set-url origin "https://x-access-token:$${GITHUB_TOKEN}@github.com/barryw/PaperlessMCP.git" && git tag -a "$$TAG" -m "Release $$VERSION" && git push origin "$$TAG"
     depends_on: [package, docker]
 
   # Create GitHub release