diff --git a/.github/workflows/check.yaml b/.github/workflows/check.yaml
index 94a679179..64be58098 100644
--- a/.github/workflows/check.yaml
+++ b/.github/workflows/check.yaml
@@ -5,6 +5,14 @@ on:
     secrets:
       NPM_TOKEN:
         required: true
+      PACT_BROKER_BASE_URL:
+        required: true
+      PACT_BROKER_TOKEN:
+        required: true
+
+env:
+  GIT_COMMIT: ${{ github.sha }}
+  GIT_REF: ${{ github.ref }}
 
 jobs:
   # this job relies on the install-build workflow to run first
@@ -56,10 +64,12 @@ jobs:
       - name: Run CT Tests
         run: npm run test:component
       - name: Publish pacts between Experiences SDK and User Interface
-        run: GIT_BRANCH=${GIT_REF:11} docker run --rm -v ${PWD}:${PWD} -e PACT_BROKER_BASE_URL -e PACT_BROKER_TOKEN pactfoundation/pact-cli publish ${PWD}/pacts --consumer-app-version ${GIT_COMMIT} --branch ${GIT_BRANCH}
+        run: echo $GIF_REF && echo $GIT_COMMIT && echo $PACT_BROKER_BASE_URL && GIT_BRANCH=${GIT_REF:11} docker run --rm -v ${PWD}:${PWD} -e PACT_BROKER_BASE_URL -e PACT_BROKER_TOKEN pactfoundation/pact-cli publish ${PWD}/pacts --consumer-app-version ${GIT_COMMIT} --branch ${GIT_BRANCH}
         env:
-          PACT_BROKER_BASE_URL: ${{ env.PACT_BROKER_BASE_URL }}
-          PACT_BROKER_TOKEN: ${{ env.PACT_BROKER_TOKEN }}
+          PACT_BROKER_BASE_URL: ${{ secrets.PACT_BROKER_BASE_URL }}
+          PACT_BROKER_TOKEN: ${{ secrets.PACT_BROKER_TOKEN }}
+          GIT_COMMIT: ${{ env.GIT_COMMIT }}
+          GIT_REF: ${{ env.GIT_REF }}
       # TODO: Record releases
       - name: Save test results to artifact
         uses: actions/upload-artifact@v4
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 57653ab22..66ab50484 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -22,6 +22,8 @@ jobs:
     uses: ./.github/workflows/check.yaml
     secrets:
       NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+      PACT_BROKER_BASE_URL: ${{ secrets.PACT_BROKER_BASE_URL }}
+      PACT_BROKER_TOKEN: ${{ secrets.PACT_BROKER_TOKEN }}
   publish:
     needs: [install-build, check]
     if: >-