still can't see token

.github/workflows/build.yml

@@ -1,4 +1,7 @@
 name: Build
+permissions:
+  contents: read
+  pull-requests: read
 on:
   push:
     branches:
@@ -15,8 +18,9 @@ jobs:
           fetch-depth: 0  # Shallow clones should be disabled for a better relevancy of analysis
       - name: Check SONAR_TOKEN
         run: echo "SONAR_TOKEN length is ${#SONAR_TOKEN}"
-        env:
+        with:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+          export_environment_variables: true
       - name: Install dependencies
         run: yarn
       - name: Test and coverage