diff --git a/.appveyor.yml b/.appveyor.yml
index 6eac862d6..fd997710c 100644
--- a/.appveyor.yml
+++ b/.appveyor.yml
@@ -56,7 +56,7 @@ deploy:
   description: 'wabt release'
   provider: GitHub
   auth_token:
-    secure: KFfsYkAo+kBfRikg9gm55VHkjNEiiDQk00S1kFjDrjEMrJRmrp6azGUeTSBfuiTH
+    secure: lHQSdycL1FHsFKZZ0RSnYSUtRitYaLb4uxDjCSOpYHnk4gIO/0/DLu4aoU2VvD7Y
   artifact: "%DEPLOY_NAME%"
   on:
     appveyor_repo_tag: true
diff --git a/scripts/appveyor-after-test.bat b/scripts/appveyor-after-test.bat
index 5451f9777..69168877f 100644
--- a/scripts/appveyor-after-test.bat
+++ b/scripts/appveyor-after-test.bat
@@ -14,7 +14,9 @@ REM limitations under the License.
 
 REM Set up the artifact for this build, but only if this is a tag build.
 
-IF "%APPVEYOR_REPO_TAG%" == "true" (
-  ren "%APPVEYOR_BUILD_FOLDER%\\bin" "wabt-%APPVEYOR_REPO_TAG_NAME%"
-  7z a %DEPLOY_NAME% "%APPVEYOR_BUILD_FOLDER%\\wabt-%APPVEYOR_REPO_TAG_NAME%\\*.exe"
+IF "%DEPLOY%" == "true" (
+  IF "%APPVEYOR_REPO_TAG%" == "true" (
+    ren "%APPVEYOR_BUILD_FOLDER%\\bin" "wabt-%APPVEYOR_REPO_TAG_NAME%"
+    7z a %DEPLOY_NAME% "%APPVEYOR_BUILD_FOLDER%\\wabt-%APPVEYOR_REPO_TAG_NAME%\\*.exe"
+  )
 )