diff --git a/scripts/gcp-setup.sh b/scripts/gcp-setup.sh
index 7308437..d55e32b 100755
--- a/scripts/gcp-setup.sh
+++ b/scripts/gcp-setup.sh
@@ -119,6 +119,7 @@ else
     --region "$AWS_REGION"
   echo "Created secret forgejo/gcs-sa-key."
 fi
+rm -f "$KEY_FILE"
 echo "Key stored in AWS Secrets Manager, local copy deleted."
 
 # --- Storage Transfer ---