diff --git a/.gitea/workflows/port-to-omp.yml b/.gitea/workflows/port-to-omp.yml
index 84a6f5b..297628c 100644
--- a/.gitea/workflows/port-to-omp.yml
+++ b/.gitea/workflows/port-to-omp.yml
@@ -1,6 +1,6 @@
 name: port-to-omp
 
-# Regenerate the omp port of pygenium from this repo and push it to
+# Regenerate the omp port of pygienium from this repo and push it to
 # Mike/omp-pygienium.
 #
 # Prerequisites on git.freno.me:
@@ -28,14 +28,14 @@ jobs:
 
       - name: Port to omp
         env:
-          PORTING_TOKEN: ${{ secrets.PORTING_TOKEN }}
+          PORTING_KEY: ${{ secrets.PORTING_KEY }}
           OMP_REPO: omp-pygienium
         run: |
           set -euo pipefail
           # Trim the secret: a stray newline from pasting silently breaks
           # oauth2 basic-auth. Fail loudly when it is missing entirely.
+          : "${PORTING_TOKEN:?PORTING_TOKEN secret is not set}" || exit 1
           PORTING_TOKEN="$(printf '%s' "${PORTING_TOKEN}" | tr -d '[:space:]')"
-          : "${PORTING_TOKEN:?PORTING_TOKEN secret is not set}"
           URL="https://oauth2:${PORTING_TOKEN}@git.freno.me/Mike/${OMP_REPO}.git"
           # The omp checkout lives in $RUNNER_TEMP, outside the pi checkout:
           # the port script refuses to write into a subdirectory of its own