diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8e5a419..e4423c9 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -49,6 +49,7 @@ jobs:
         id: githubAppAuth
         run: |
           TOKEN="$(npx obtain-github-app-installation-access-token ci ${{ secrets.GH_BRANCH_PROTECTION_APP_TOKEN }})"
+          echo "::add-mask::$TOKEN"
           echo token=${TOKEN} >> $GITHUB_OUTPUT
 
       - name: update and push due to new release