diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index deef5f6..f608e51 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -17,10 +17,18 @@ jobs:
     name: Release version
     runs-on: ubuntu-24.04
     steps:
+      - name: Create GitHub App token
+        uses: actions/create-github-app-token@v2
+        id: app-token
+        with:
+          # required
+          app-id: 1312871
+          private-key: ${{ secrets.OPENMCP_CI_APP_PRIVATE_KEY }}
+
       - name: Checkout code
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
-          ssh-key: ${{ secrets.PUSH_KEY }}
+          token: ${{ steps.app-token.outputs.token }}
           fetch-tags: true
           fetch-depth: 0
           submodules: recursive
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index bd60f48..adbb7dd 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -14,10 +14,18 @@ jobs:
     name: Release version
     runs-on: ubuntu-24.04
     steps:
+      - name: Create GitHub App token
+        uses: actions/create-github-app-token@v2
+        id: app-token
+        with:
+          # required
+          app-id: 1312871
+          private-key: ${{ secrets.OPENMCP_CI_APP_PRIVATE_KEY }}
+
       - name: Checkout code
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
-          ssh-key: ${{ secrets.PUSH_KEY }}
+          token: ${{ steps.app-token.outputs.token }}
           fetch-tags: true
           fetch-depth: 0
           submodules: recursive
diff --git a/.gitignore b/.gitignore
index ada68ff..41eb2bd 100644
--- a/.gitignore
+++ b/.gitignore
@@ -25,3 +25,5 @@ go.work
 *.swp
 *.swo
 *~
+
+*.html