diff --git a/.woodpecker.yml b/.woodpecker.yml
index 3d6fe1a..45cdd67 100644
--- a/.woodpecker.yml
+++ b/.woodpecker.yml
@@ -139,6 +139,7 @@ steps:
           export PROJECT ENV
 
             # Pull runtime secrets (unchanged list)
+            IMG_TAG="$(gcloud secrets versions access latest --secret=IMG_TAG --project=aptivaai-dev)"; export IMG_TAG
             JWT_SECRET="$(gcloud secrets versions access latest --secret=JWT_SECRET_$ENV --project="$PROJECT")"; export JWT_SECRET
             OPENAI_API_KEY="$(gcloud secrets versions access latest --secret=OPENAI_API_KEY_$ENV --project="$PROJECT")"; export OPENAI_API_KEY
             ONET_USERNAME="$(gcloud secrets versions access latest --secret=ONET_USERNAME_$ENV --project="$PROJECT")"; export ONET_USERNAME
@@ -191,8 +192,7 @@ steps:
               docker compose up -d --force-recreate --remove-orphans
 
             echo "✅ Prod stack refreshed with tag $IMG_TAG"
-            EOSSH
-
+          
     secrets:
       - PROD_SSH_KEY
       - PROD_SSH_TARGET