diff --git a/.woodpecker.yaml b/.woodpecker.yaml
index 7c36426..3e383cc 100644
--- a/.woodpecker.yaml
+++ b/.woodpecker.yaml
@@ -30,7 +30,9 @@ steps:
     commands:
       - apk add --no-cache git-subtree
       - git subtree split --prefix=libs/ruby/warp_engine HEAD -b warp-engine-split
-      - git push --force "https://ci:$${FORGE_TOKEN}@git.teletypegames.org/tools/warp_engine.git" warp-engine-split:master
+      # a secretbe másolt token végén lehet sortörés — levágjuk
+      - TOKEN="$$(printf '%s' "$${FORGE_TOKEN}" | tr -d '[:space:]')"
+      - git push --force "https://ci:$${TOKEN}@git.teletypegames.org/tools/warp_engine.git" warp-engine-split:master
     when:
       - event: push
         branch: master
@@ -45,8 +47,9 @@ steps:
       - cd libs/ruby/warp_engine
       - gem build warp_engine.gemspec
       - mkdir -p ~/.gem
+      - TOKEN="$$(printf '%s' "$${FORGE_TOKEN}" | tr -d '[:space:]')"
       - |
-        printf -- '---\n:https://git.teletypegames.org/api/packages/tools/rubygems: Bearer %s\n' "$${FORGE_TOKEN}" > ~/.gem/credentials
+        printf -- '---\n:https://git.teletypegames.org/api/packages/tools/rubygems: Bearer %s\n' "$${TOKEN}" > ~/.gem/credentials
       - chmod 600 ~/.gem/credentials
       - gem push --host https://git.teletypegames.org/api/packages/tools/rubygems warp_engine-*.gem
     when: