diff --git a/.github/actionlint.yaml b/.github/actionlint.yaml
index d3d3f1f1d5..3c020f2a25 100644
--- a/.github/actionlint.yaml
+++ b/.github/actionlint.yaml
@@ -1,2 +1,2 @@
 config-variables:
-  - SYMPHONY_DEPLOY_APP_ID
+  - SYMPHONY_DEPLOY_CLIENT_ID
diff --git a/.github/workflows/publish-shared.yml b/.github/workflows/publish-shared.yml
index 1f238a0416..779db164b2 100644
--- a/.github/workflows/publish-shared.yml
+++ b/.github/workflows/publish-shared.yml
@@ -129,7 +129,7 @@ jobs:
         id: app-token
         uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3
         with:
-          app-id: ${{ vars.SYMPHONY_DEPLOY_APP_ID }}
+          client-id: ${{ vars.SYMPHONY_DEPLOY_CLIENT_ID }}
           private-key: ${{ secrets.SYMPHONY_DEPLOY_APP_PRIVATE_KEY }}
           owner: activeviam
           repositories: shared-infrastructure
diff --git a/ACTIVEVIAM.md b/ACTIVEVIAM.md
index 57c5583713..df81b0277f 100644
--- a/ACTIVEVIAM.md
+++ b/ACTIVEVIAM.md
@@ -170,7 +170,7 @@ would expand the trust boundary unnecessarily. The App is installed only on
 activeviam/shared-infrastructure with repository contents and pull-request read/write access. The
 source repository holds:
 
-- Actions variable SYMPHONY_DEPLOY_APP_ID
+- Actions variable SYMPHONY_DEPLOY_CLIENT_ID
 - Actions secret SYMPHONY_DEPLOY_APP_PRIVATE_KEY
 
 This deployment App is intentionally separate from the runtime App mounted in EKS. Giving the