.woodpecker/publish.yaml

@@ -9,11 +9,11 @@ depends_on:
 steps:
   - name: refresh-index
     image: nixpkgs/nix:nixos-22.05
-    environment:
+    secrets:
-      AWS_ACCESS_KEY_ID:
+      - source: garagehq_aws_access_key_id
-        from_secret: garagehq_aws_access_key_id
+        target: AWS_ACCESS_KEY_ID
-      AWS_SECRET_ACCESS_KEY:
+      - source: garagehq_aws_secret_access_key
-        from_secret: garagehq_aws_secret_access_key
+        target: AWS_SECRET_ACCESS_KEY
     commands:
       - mkdir -p /etc/nix && cp nix/nix.conf /etc/nix/nix.conf
       - nix-shell --attr ci --run "refresh_index"

.woodpecker/release.yaml

@@ -48,10 +48,11 @@ steps:
     image: nixpkgs/nix:nixos-22.05
     environment:
       TARGET: "${TARGET}"
-      AWS_ACCESS_KEY_ID:
+    secrets:
-        from_secret: garagehq_aws_access_key_id
+      - source: garagehq_aws_access_key_id
-      AWS_SECRET_ACCESS_KEY:
+        target: AWS_ACCESS_KEY_ID
-        from_secret: garagehq_aws_secret_access_key
+      - source: garagehq_aws_secret_access_key
+        target: AWS_SECRET_ACCESS_KEY
     commands:
       - nix-shell --attr ci --run "to_s3"