From 66e3e4f4f913dd7c96ea62f1102a7a51ab678d4e Mon Sep 17 00:00:00 2001
From: Serhii Bykov <esphynox@gmail.com>
Date: Fri, 7 Aug 2026 12:55:26 +0200
Subject: [PATCH] fix(ci): stop using secrets in workflow if guards

---
 .github/workflows/release.yml | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 38a5c77..707993c 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -107,6 +107,8 @@ jobs:
     if: ${{ !endsWith(github.ref_name, '-test') }}
     runs-on: ubuntu-latest
     needs: release
+    env:
+      HOMEBREW_TAP_DISPATCH_TOKEN: ${{ secrets.HOMEBREW_TAP_DISPATCH_TOKEN }}
 
     steps:
       - name: Download release artifacts
@@ -141,9 +143,9 @@ jobs:
           } >> "$GITHUB_OUTPUT"
 
       - name: Dispatch Homebrew tap update
-        if: ${{ secrets.HOMEBREW_TAP_DISPATCH_TOKEN != '' }}
+        if: ${{ env.HOMEBREW_TAP_DISPATCH_TOKEN != '' }}
         env:
-          GH_TOKEN: ${{ secrets.HOMEBREW_TAP_DISPATCH_TOKEN }}
+          GH_TOKEN: ${{ env.HOMEBREW_TAP_DISPATCH_TOKEN }}
         shell: bash
         run: |
           set -euo pipefail
@@ -163,5 +165,5 @@ jobs:
           EOF
 
       - name: Skip Homebrew tap update dispatch
-        if: ${{ secrets.HOMEBREW_TAP_DISPATCH_TOKEN == '' }}
+        if: ${{ env.HOMEBREW_TAP_DISPATCH_TOKEN == '' }}
         run: echo "::notice::Skipping Homebrew tap update dispatch because HOMEBREW_TAP_DISPATCH_TOKEN is not configured."