diff --git a/.woodpecker/ci.yaml b/.woodpecker/ci.yaml
index fe00956..606a477 100644
--- a/.woodpecker/ci.yaml
+++ b/.woodpecker/ci.yaml
@@ -12,9 +12,11 @@ steps:
 
   sign:
     image: docker.io/nixpkgs/nix-flakes:nixos-25.05
-    env:
-        DB_KEY: ${{ secrets.DBKEY }}
-        DB_CRT: ${{ secrets.DBCRT }}
+    environment:
+        DB_KEY:
+          from_secret: secure_boot_key
+        DB_CRT:
+          from_secret: secure_boot_crt
     commands:
       - ./scripts/sign-release.sh