diff --git a/main.go b/main.go
index 8992ac0..c10189a 100644
--- a/main.go
+++ b/main.go
@@ -101,7 +101,9 @@ func run(c *cli.Context) error {
 	if plugin.Config.Debug {
 		debug(&plugin)
 	}
+
 	resolveSecrets(&plugin)
+
 	if plugin.Config.Debug {
 		debug(&plugin)
 	}
diff --git a/plugin.go b/plugin.go
index a398941..a93c1d2 100644
--- a/plugin.go
+++ b/plugin.go
@@ -108,6 +108,7 @@ func resolveSecrets(p *Plugin) {
 			envval := os.Getenv(secret)
 			p.Config.Values = resolveEnvVar(p.Config.Values, secret, envval)
 			p.Config.APIServer = resolveEnvVar(p.Config.APIServer, secret, envval)
+			p.Config.Token = resolveEnvVar(p.Config.Token, secret, envval)
 		}
 	}
 }