diff --git a/diff_poetry_lock/settings.py b/diff_poetry_lock/settings.py
index 1224289..d535789 100644
--- a/diff_poetry_lock/settings.py
+++ b/diff_poetry_lock/settings.py
@@ -4,7 +4,7 @@
 from typing import Any, ClassVar, Protocol, runtime_checkable
 
 from loguru import logger
-from pydantic import BaseSettings, Field, PrivateAttr, ValidationError, validator
+from pydantic import BaseSettings, Field, PrivateAttr, SecretStr, ValidationError, validator
 
 
 class PrLookupService(Protocol):
@@ -53,7 +53,7 @@ class VelaSettings(BaseSettings, Settings):
     repo_branch: str = Field(env="VELA_REPO_BRANCH")
 
     # from step config including secrets
-    token: str = Field(env="PARAMETER_GITHUB_TOKEN")
+    token: SecretStr = Field(env="PARAMETER_GITHUB_TOKEN")
     lockfile_path: str = Field(env="PARAMETER_LOCKFILE_PATH", default="poetry.lock")
     api_url: str = Field(env="PARAMETER_GITHUB_API_URL", default="https://api.github.com")
 
@@ -97,7 +97,7 @@ class GitHubActionsSettings(BaseSettings, Settings):
     base_ref: str = Field(env="github_base_ref")
 
     # from step config including secrets
-    token: str = Field(env="input_github_token")
+    token: SecretStr = Field(env="input_github_token")
     lockfile_path: str = Field(env="input_lockfile_path", default="poetry.lock")
     api_url: str = Field(env="github_api_url", default="https://api.github.com")