From 6fdd0bf0d01475a143d57a99d2656d9cce715a6b Mon Sep 17 00:00:00 2001
From: leonard-tesnov <ltesnovs@gocardless.com>
Date: Thu, 27 Aug 2026 15:56:53 +0300
Subject: [PATCH] Improve scope of publish token

---
 .github/workflows/ci.yml | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 3f28e20..b06326b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -6,9 +6,6 @@ on:
     branches:
       - master
 
-env:
-  RUBYGEM_PUBLISH_API_KEY: ${{ secrets.RUBYGEM_PUBLISH_API_KEY }}
-
 jobs:
   test:
     runs-on: ubuntu-latest
@@ -68,6 +65,8 @@ jobs:
           fi
       - name: Build and publish gem
         if: steps.version_check.outputs.already_published == 'false'
+        env:
+          RUBYGEM_PUBLISH_API_KEY: ${{ secrets.RUBYGEM_PUBLISH_API_KEY }}
         run: |
           mkdir -p $HOME/.gem
           touch $HOME/.gem/credentials