diff --git a/.github/workflows/distribute.yml b/.github/workflows/distribute.yml
index 4cc8748..d907ae4 100644
--- a/.github/workflows/distribute.yml
+++ b/.github/workflows/distribute.yml
@@ -141,7 +141,7 @@ jobs:
     steps:
       - name: Sync and publish the ComfyUI nodes
         env:
-          GH_TOKEN: ${{ secrets.HOMEBREW_TAP_TOKEN }}
+          GH_TOKEN: ${{ secrets.COMFYUI_RELEASE_TOKEN }}
         run: |
           set -euo pipefail
           repo=wiltodelta/ComfyUI-remove-ai-watermarks
diff --git a/docs/release-and-distribution.md b/docs/release-and-distribution.md
index 3fc7d6e..1c98000 100644
--- a/docs/release-and-distribution.md
+++ b/docs/release-and-distribution.md
@@ -83,9 +83,9 @@ that repository's sync workflow with the exact library version and waits for it
 to finish. The sync updates the dependency floor, runs compatibility tests,
 bumps the node patch version, and publishes to the ComfyUI Registry only when
 those tests pass. Its daily schedule remains as a recovery path if a release
-dispatch is interrupted. The `HOMEBREW_TAP_TOKEN` repository secret is also the
-cross-repository release token; it needs Actions read and write access to the
-ComfyUI node repository.
+dispatch is interrupted. The `COMFYUI_RELEASE_TOKEN` repository secret is a
+fine-grained token limited to the ComfyUI node repository, with Actions read and
+write access.
 
 ## Release verification