diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 80469bb..0ac5b34 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -13,13 +13,6 @@ jobs:
       packages: write
       id-token: write
     steps:
-      - uses: step-security/wait-for-secrets@v1
-        id: wait-for-secrets
-        with:
-          secrets: |
-            OTP: 
-              name: 'OTP to publish package'
-              description: 'OTP from authenticator app'
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
@@ -28,6 +21,13 @@ jobs:
           cache: "yarn"
       - run: yarn --frozen-lockfile
       - run: yarn test
+      - uses: step-security/wait-for-secrets@v1
+        id: wait-for-secrets
+        with:
+          secrets: |
+            OTP: 
+              name: 'OTP to publish package'
+              description: 'OTP from authenticator app'
       - run: npm publish --otp ${{ steps.wait-for-secrets.outputs.OTP }}
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}