diff --git a/.github/workflows/deploy-website.yml b/.github/workflows/deploy-website.yml
index 4f6cbe23..94c1b166 100644
--- a/.github/workflows/deploy-website.yml
+++ b/.github/workflows/deploy-website.yml
@@ -3,22 +3,23 @@ name: Deploy Nebari website
 on:
   workflow_dispatch:
   schedule:
-    # * 10:37 every day – 37 just to not trigger exactly at 10:30 like many other;
+	# * 10:37 every day – 37 just to not trigger exactly at 10:30 like many other;
     #  10:37 UTC is 6:30am EST is a bit before the beginning of the day in the US,
-    - cron: "37 10  * * *"
+    - cron: "37 10 * * *"  # 10:37 UTC daily
 
 jobs:
   build_site:
     runs-on: ubuntu-latest
     environment: docs-prod
-    name: "Trigger Netlify build"
     steps:
       - name: Check out repository 🛎️
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
-      - name: Trigger Netlify build  🚀
-        uses: wei/curl@v1.1.1
+      - name: Trigger Netlify build 🚀
         env:
           WEBHOOK: ${{ secrets.NETLIFY_WEBHOOK }}
+        uses: wei/curl@v1.1.1
         with:
-          args: -X POST ${WEBHOOK}
+          # Use Actions interpolation (not ${WEBHOOK}). GitHub will mask the secret in logs.
+          # -f: fail on HTTP errors, -sS: silent but show errors, -o /dev/null: drop body
+          args: -fsS -X POST ${{ env.WEBHOOK }} -o /dev/null