diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 614131ec..51da3819 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -54,6 +54,8 @@ jobs:
   test-unit:
     needs: [test-lint]
     uses: ./.github/workflows/step_tests-unit.yml
+    secrets:  
+      app_private_key: ${{ secrets.APP_UPDATE_README_HELPER_PRIVATE_KEY }}
 
   test-e2e:
     needs: [test-lint, test-unit]
diff --git a/.github/workflows/step_tests-unit.yml b/.github/workflows/step_tests-unit.yml
index 22a69208..dd431e2c 100644
--- a/.github/workflows/step_tests-unit.yml
+++ b/.github/workflows/step_tests-unit.yml
@@ -3,6 +3,9 @@ run-name: Unit Tests
 
 on:
   workflow_call:
+    secrets:
+      app_private_key:
+        required: true
 
 jobs:
   unit-tests:
@@ -79,8 +82,8 @@ jobs:
         id: app-token
         if: steps.verify-changed-files.outputs.files_changed == 'true' && github.ref == 'refs/heads/main'
         with:
-          app-id: 4221824
-          private-key: ${{ secrets.APP_UPDATE_README_HELPER_PRIVATE_KEY }}
+          client-id: 4221824
+          private-key: ${{ secrets.app_private_key }}
 
       - name: Commit changes
         if: steps.verify-changed-files.outputs.files_changed == 'true' && github.ref == 'refs/heads/main'
diff --git a/.github/workflows/update-citation.yml b/.github/workflows/update-citation.yml
index 6bba460d..22237a02 100644
--- a/.github/workflows/update-citation.yml
+++ b/.github/workflows/update-citation.yml
@@ -39,11 +39,11 @@ jobs:
         id: app-token
         if: steps.verify-changed-files.outputs.files_changed == 'true' && github.ref == 'refs/heads/main'
         with:
-          app-id: 4221824
+          client-id: 4221824
           private-key: ${{ secrets.APP_UPDATE_README_HELPER_PRIVATE_KEY }}
 
       - name: Commit changes
-        if: steps.verify-changed-files.outputs.files_changed == 'true' && && github.ref == 'refs/heads/main'
+        if: steps.verify-changed-files.outputs.files_changed == 'true' && github.ref == 'refs/heads/main'
         run: |
           git config --local user.email "bot@ceems.com"
           git config --local user.name "CEEMS bot"
@@ -51,7 +51,7 @@ jobs:
           git commit -m "chore: Update version in CITATION.cff" -s
 
       - name: Push changes
-        if: steps.verify-changed-files.outputs.files_changed == 'true' && && github.ref == 'refs/heads/main'
+        if: steps.verify-changed-files.outputs.files_changed == 'true' && github.ref == 'refs/heads/main'
         uses: ad-m/github-push-action@master
         with:
           github_token: ${{ steps.app-token.outputs.token }}