diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index 546bd08..7cb5de1 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -70,8 +70,6 @@ jobs:
         run: yarn workspace ${{ matrix.app }} build
         shell: bash
       - name: Package executable bundles, make distributables
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: yarn workspace ${{ matrix.app }} make
         shell: bash
   windows:
@@ -91,8 +89,6 @@ jobs:
         run: yarn workspace ${{ matrix.app }} build
         shell: bash
       - name: Package executable bundles, sign and notarize, make distributables
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           yarn workspace ${{ matrix.app }} make
           # #TODO: probably not correct
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 93d8217..88b6cf6 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -54,6 +54,8 @@ jobs:
           APPLE_API_KEY: ${{ secrets.APPLE_API_KEY }}
           APPLE_API_ISSUER: ${{ secrets.APPLE_API_ISSUER }}
           APPLE_API_KEY_PATH: ${{ env.APPLE_API_KEY_PATH }}
+          BUCKET_ACCESS_KEY_ID: ${{ secrets.BUCKET_ACCESS_KEY_ID }}
+          BUCKET_SECRET_ACCESS_KEY: ${{ secrets.BUCKET_SECRET_ACCESS_KEY }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: yarn workspace ${{ matrix.app }} publish
         shell: bash
@@ -73,6 +75,8 @@ jobs:
         shell: bash
       - name: Package executable bundles, make and publish distributables
         env:
+          BUCKET_ACCESS_KEY_ID: ${{ secrets.BUCKET_ACCESS_KEY_ID }}
+          BUCKET_SECRET_ACCESS_KEY: ${{ secrets.BUCKET_SECRET_ACCESS_KEY }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: yarn workspace ${{ matrix.app }} publish
         shell: bash
@@ -94,6 +98,8 @@ jobs:
         shell: bash
       - name: Package executable bundles, sign and notarize, make and publish distributables
         env:
+          BUCKET_ACCESS_KEY_ID: ${{ secrets.BUCKET_ACCESS_KEY_ID }}
+          BUCKET_SECRET_ACCESS_KEY: ${{ secrets.BUCKET_SECRET_ACCESS_KEY }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           yarn workspace ${{ matrix.app }} publish