diff --git a/.github/workflows/thurloe-build-tag-publish.yml b/.github/workflows/thurloe-build-tag-publish.yml
index 2f75fbc6..fa61053e 100644
--- a/.github/workflows/thurloe-build-tag-publish.yml
+++ b/.github/workflows/thurloe-build-tag-publish.yml
@@ -47,6 +47,10 @@ jobs:
           service_account: 'gcr-publish@broad-dsp-gcr-public.iam.gserviceaccount.com'
           id_token_audience: "1038484894585-k8qvf7l876733laev0lm8kenfa2lj6bn.apps.googleusercontent.com" 
       
+      - id: generate_docker_password
+        name: Generate Docker password
+        run: gh secret set DOCKER_PASSWORD << ${{ steps.auth.outputs.credentials_file_path }} 
+
       # Build and push jar to GCR
       - uses: mr-smithers-excellent/docker-build-push@v6
         name: Build Thurloe jar
@@ -56,7 +60,7 @@ jobs:
           tags: ${{ github.event.repository.full_name }}:${DOCKER_TAG}
           image: $GCR_REGISTRY/${DOCKER_TAG} 
           username: _json_key
-          password: ${{ steps.auth.outputs.credentials_file_path }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
  
   report-to-sherlock:
     # Report new thurloe version to Broad DevOps