diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index d24d01e..48b8dbd 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -15,6 +15,7 @@ jobs:
     name: Release and Upload Artifacts
     runs-on: ubuntu-latest
     needs: run-tests
+    environment: Publish
 
     concurrency:
       group: ${{ github.workflow }}-release-${{ github.ref_name }}
@@ -29,11 +30,11 @@ jobs:
 
     steps:
       - name: Setup | Get CI Bot Token
-        uses: tibdex/github-app-token@v1
+        uses: actions/create-github-app-token@v3
         id: ci_bot_token
         with:
-          app_id: ${{ secrets.CI_BOT_APP_ID }}
-          private_key: ${{ secrets.CI_BOT_SECRET }}
+          client-id: ${{ vars.PUBLISH_CI_APP_CLIENT_ID }}
+          private-key: ${{ secrets.PUBLISH_CI_APP_KEY }}
 
       - name: Setup | Checkout Repository
         uses: actions/checkout@v4
diff --git a/.github/workflows/sync-docs.yml b/.github/workflows/sync-docs.yml
index 6ff498f..18deab8 100644
--- a/.github/workflows/sync-docs.yml
+++ b/.github/workflows/sync-docs.yml
@@ -9,6 +9,7 @@ jobs:
   generate-and-sync:
     if: github.event_name != 'release' || !contains(github.event.release.tag_name, '-')
     runs-on: ubuntu-latest
+    environment: Sync-docs
     permissions:
       contents: read
     steps:
@@ -39,9 +40,9 @@ jobs:
 
       - name: Generate docs repo token
         id: app-token
-        uses: actions/create-github-app-token@v1
+        uses: actions/create-github-app-token@v3
         with:
-          app-id: ${{ vars.DOCS_SYNC_APP_ID }}
+          client-id: ${{ vars.DOCS_SYNC_APP_CLIENT_ID }}
           private-key: ${{ secrets.DOCS_SYNC_APP_KEY }}
           repositories: genlayer-docs