diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index b55429e1d..1c779c6a5 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -85,13 +85,16 @@ jobs:
         python setup.py sdist bdist_wheel
         twine upload dist/*
     - name: Install SSH private key
-      if: ${{ secrets.BREW_TOKEN }}
+      env:
+        BREW_TOKEN: ${{ secrets.BREW_TOKEN }}
+      if: ${{ env.BREW_TOKEN }}
       uses: webfactory/ssh-agent@v0.5.3
       with:
-          ssh-private-key: ${{ secrets.BREW_TOKEN }}
+          ssh-private-key: ${{ env.BREW_TOKEN }}
     - name: Update Homebrew Formulae
-      # can't use secrets.GITHUB_TOKEN because it's outside yt-dlp repository
-      if: ${{ secrets.BREW_TOKEN }}
+      env:
+        BREW_TOKEN: ${{ secrets.BREW_TOKEN }}
+      if: ${{ env.BREW_TOKEN }}
       run: |
         git clone git@github.com:yt-dlp/homebrew-taps taps/
         python3 devscripts/update-formulae.py taps/Formula/yt-dlp.rb "${{ steps.bump_version.outputs.ytdlp_version }}"