diff --git a/.github/workflows/cd.yaml b/.github/workflows/cd.yaml
index 882646fb8..8dcb684fe 100644
--- a/.github/workflows/cd.yaml
+++ b/.github/workflows/cd.yaml
@@ -19,6 +19,7 @@ jobs:
       - name: Push tag for each updated package
         env:
           GH_TOKEN: ${{ secrets.RENOVATE_TOKEN }}
+          PYPI_TOKEN: ${{ secrets.PYPI_TOKEN }}
         run: |
           git config --global user.name "SDK Releaser Bot"
           git config --global user.email "noreply@stackit.de"
diff --git a/core/pyproject.toml b/core/pyproject.toml
index 8f8e2d09e..efe3b32f9 100644
--- a/core/pyproject.toml
+++ b/core/pyproject.toml
@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "stackit-core"
-version = "v0.0.1a4"
+version = "v0.0.1a5"
 authors = ["STACKIT Developer Tools <developer-tools@stackit.cloud>"]
 description = "Core functionality for the STACKIT SDK for Python"
 readme = "README.md"
diff --git a/scripts/cd.sh b/scripts/cd.sh
index 122e51c58..6daaef624 100755
--- a/scripts/cd.sh
+++ b/scripts/cd.sh
@@ -14,6 +14,6 @@ for file in $(git diff --name-only HEAD~1..HEAD | grep pyproject.toml); do
         echo "Tag '$expected_tag' does not exist. Creating new tag to trigger release."
         git tag -a $expected_tag -m "Release $version"
         git push origin tag $expected_tag
-        poetry publish --build --username="__token__" --no-interaction --password="${{ secrets.PYPI_TOKEN }}"
+        poetry publish --build --username="__token__" --no-interaction --password="$PYPI_TOKEN"
     fi              
 done