diff --git a/.harness/firebase-deploy.yaml b/.harness/firebase-deploy.yaml
index b8f9612..282d83c 100644
--- a/.harness/firebase-deploy.yaml
+++ b/.harness/firebase-deploy.yaml
@@ -34,6 +34,8 @@ spec:
             spec:
               name: build
               container: andreysenov/firebase-tools
+              envs:
+                FIREBASE_CI_TOKEN: '${{ secrets.get("resume-firebase-squeaky2x3-gmail-token") }}'
               shell: sh
               script: |
-                bash ./deploy.firebase.sh '${{ secrets.get("resume-firebase-squeaky2x3-gmail-token") }}'
+                bash ./deploy.firebase.sh
diff --git a/deploy.firebase.sh b/deploy.firebase.sh
index 1e0d77b..1495bee 100755
--- a/deploy.firebase.sh
+++ b/deploy.firebase.sh
@@ -34,9 +34,9 @@ echo firebase init
 args=()
 log_args=()
 if ! tty; then
-   args+=("--token" "$1")
-   log_args+=("--token" "${1:0:1}")
-   test "${1:0:1}" != "$"
+   args+=("--token" "$FIREBASE_CI_TOKEN")
+   log_args+=("--token" "${FIREBASE_CI_TOKEN:0:1}")
+   test "${FIREBASE_CI_TOKEN:0:1}" != "$"
 fi
 echo firebase deploy "${log_args[@]}"
 firebase deploy "${args[@]}"