diff --git a/.github/workflows/build-and-release.yml b/.github/workflows/build-and-release.yml
index bd6af27..338b345 100644
--- a/.github/workflows/build-and-release.yml
+++ b/.github/workflows/build-and-release.yml
@@ -94,3 +94,4 @@ jobs:
           args: release --clean
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          HOMEBREW_TAP_GITHUB_TOKEN: ${{ secrets.HOMEBREW_TAP_GITHUB_TOKEN }}
diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index 7dc7039..651713a 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -68,7 +68,8 @@ brews:
     repository:
       owner: scalytics
       name: homebrew-tap
-      token: "{{ .Env.HOMEBREW_TAP_GITHUB_TOKEN }}"
+      token: '{{ index .Env "HOMEBREW_TAP_GITHUB_TOKEN" }}'
+    skip_upload: '{{ if not (index .Env "HOMEBREW_TAP_GITHUB_TOKEN") }}true{{ end }}'
     homepage: "https://github.com/scalytics/kshark-core"
     description: "Kafka connectivity diagnostic tool — layered probe from DNS to produce/consume"
     license: "Apache-2.0"