diff --git a/.gitea/workflows/cicd.yml b/.gitea/workflows/cicd.yml
index 7e66650..6639268 100644
--- a/.gitea/workflows/cicd.yml
+++ b/.gitea/workflows/cicd.yml
@@ -22,14 +22,24 @@ jobs:
       - name: Load environment variables from Infisical
         env:
           INFISICAL_API_URL: "https://vault.bigdata.pens.ac.id"
-          INFISICAL_TOKEN: "st.d618fb82-0118-4b34-ba0a-69214b7186b8.9dfd304c29151cbfd3b67c26cfcd149f.c0e0edc796f1d15a378d5245eacdf050"
+          INFISICAL_TOKEN: "st.2bc8b1e3-44d3-43d0-9657-f9cb0a267c01.feab3bb260549fd3a1260e5ed07c2240.2dfe575eb8720426f90a3f80c3f3276e"
         run: |
-          echo "Fetching secrets from Infisical..."
-          echo "$BRANCH"
+          echo "🔍 Checking Infisical CLI..."
+          if ! command -v infisical >/dev/null 2>&1; then
+            echo "⚙️ Infisical CLI not found — installing..."
+            curl -1sLf 'https://dl.cloudsmith.io/public/infisical/infisical-cli/setup.alpine.sh' | bash
+            apk add infisical
+          else
+            echo "✅ Infisical CLI already installed."
+          fi
+
+          echo "🚀 Fetching secrets from Infisical..."
           infisical export --env=production > .env.production
           infisical export --env=development > .env.dev
           infisical export --env=staging > .env.staging
+          
           ls -alth .
+
           cat .env.production
           cat .env.dev
           cat .env.staging
\ No newline at end of file