diff --git a/.github/workflows/promote-artifact.yml b/.github/workflows/promote-artifact.yml
index 5cc6d93788..cd51c800a9 100644
--- a/.github/workflows/promote-artifact.yml
+++ b/.github/workflows/promote-artifact.yml
@@ -55,10 +55,6 @@ jobs:
                 if: ${{inputs.deployment-track == 'Alpha'}}
                 run: ./gradlew promoteArtifact --from-track internal --promote-track alpha
 
-            -   name: App sweep security scan
-                if: ${{inputs.deployment-track == 'Alpha'}}
-                uses: ./.github/workflows/app-sweep.yml
-
             -   name: Promote to production 25%
                 if: ${{inputs.deployment-track == 'Prod-25-Percent-Rollout'}}
                 run: ./gradlew promoteArtifact --from-track alpha --promote-track production --release-status inProgress --user-fraction .25
@@ -74,4 +70,8 @@ jobs:
             -   name: Promote to production 100%
                 if: ${{inputs.deployment-track == 'Prod-100-Percent-Rollout'}}
                 run: ./gradlew promoteArtifact --update production --release-status completed
-
+    app-sweep-scan:
+        name: App Sweep Security Scan
+        if: ${{inputs.deployment-track == 'Alpha'}}
+        uses: ./.github/workflows/app-sweep.yml
+        secrets: inherit