diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index b995aa70..ba1f2f3b 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -221,6 +221,7 @@ jobs:
                     echo "✅ Successfully authenticated with a token."
                     echo "::add-mask::$TOKEN"
                     echo "token=$TOKEN" >> $GITHUB_OUTPUT
+                    echo "NPM_TOKEN=$TOKEN" >> $GITHUB_ENV
                     echo "user=$U" >> $GITHUB_OUTPUT
                     exit 0
                   fi
@@ -242,10 +243,9 @@ jobs:
             NEXT_PUBLIC_TARGET=${{ needs.prepare.outputs.target }}
             UMAMI_WEBSITE_ID=${{ secrets.UMAMI_WEBSITE_ID || vars.UMAMI_WEBSITE_ID }}
             UMAMI_API_ENDPOINT=${{ secrets.UMAMI_API_ENDPOINT || vars.UMAMI_API_ENDPOINT || 'https://analytics.infra.mintel.me' }}
-            NPM_TOKEN=${{ steps.discover_token.outputs.token }}
           tags: git.infra.mintel.me/mmintel/klz-2026:${{ needs.prepare.outputs.image_tag }}
           secrets: |
-            NPM_TOKEN=${{ steps.discover_token.outputs.token }}
+            NPM_TOKEN
 
   # ──────────────────────────────────────────────────────────────────────────────
   # JOB 4: Deploy