diff --git a/.gitea/workflows/publish.yml b/.gitea/workflows/publish.yml
index e357433..a094383 100644
--- a/.gitea/workflows/publish.yml
+++ b/.gitea/workflows/publish.yml
@@ -20,6 +20,7 @@ jobs:
         with:
           ref: ${{ github.ref_name }}
           fetch-depth: 0
+          persist-credentials: false
 
       - name: Set up Python
         uses: actions/setup-python@v6
@@ -66,7 +67,7 @@ jobs:
         env:
           TWINE_USERNAME: "__token__"
           TWINE_PASSWORD: ${{ secrets.MX_GITEA_BOT_TOKEN }}
-          GITEA_TOKEN: ${{ secrets.MX_GITEA_BOT_TOKEN }}
+          MX_GITEA_BOT_TOKEN: ${{ secrets.MX_GITEA_BOT_TOKEN }}
         run: |
           pip install python-semantic-release==9.* wheel build twine
           semantic-release --config ./ci/semantic_release.toml version
diff --git a/ci/semantic_release.toml b/ci/semantic_release.toml
index a922328..ededef8 100644
--- a/ci/semantic_release.toml
+++ b/ci/semantic_release.toml
@@ -28,9 +28,7 @@ default_bump_level = 0
 [tool.semantic_release.remote]
 type = "gitea"
 domain = "gitea.psi.ch"
-
-[tool.semantic_release.remote.token]
-env = "GITEA_TOKEN"
+token = { env = "MX_GITEA_BOT_TOKEN" }
 
 [tool.semantic_release.publish]
 dist_glob_patterns = ["dist/*"]