diff --git a/.github/workflows/zitadel.yml b/.github/workflows/zitadel.yml
index 6d001329fa..0ae83a0453 100644
--- a/.github/workflows/zitadel.yml
+++ b/.github/workflows/zitadel.yml
@@ -51,6 +51,11 @@ jobs:
           registry: europe-docker.pkg.dev
           username: _json_key_base64
           password: ${{ secrets.GCR_JSON_KEY_BASE64 }}
+      - uses: tibdex/github-app-token@v1
+        id: generate-token
+        with:
+          app_id: ${{ secrets.APP_ID }}
+          private_key: ${{ secrets.APP_PRIVATE_KEY }}
       - uses: goreleaser/goreleaser-action@v2
         name: Publish ZITADEL
         if: steps.semantic.outputs.new_release_published == 'true' && github.ref == 'refs/heads/main' || github.event_name == 'workflow_dispatch'
diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index 2ef044f169..58afcb9820 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -55,7 +55,7 @@ gomod:
 
 checksum:
   name_template: 'checksums.txt'
-  
+
 changelog:
   sort: asc
   filters:
@@ -67,6 +67,8 @@ brews:
   - tap:
       owner: zitadel
       name: zitadel-tap
+      token: "{{ steps.generate-token.outputs.token }}"
+
     folder: Formula
     goarm: "7"
     homepage:  https://zitadel.ch