diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 338ba85..5d56a0b 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -37,11 +37,14 @@ jobs:
             experimental-features = nix-command flakes
 
       - name: Import code-signing certificate
-        if: ${{ secrets.MACOS_CERTIFICATE != '' && secrets.MACOS_CERTIFICATE_PWD != '' }}
+        env:
+          MACOS_CERTIFICATE: ${{ secrets.MACOS_CERTIFICATE }}
+          MACOS_CERTIFICATE_PWD: ${{ secrets.MACOS_CERTIFICATE_PWD }}
+        if: ${{ env.MACOS_CERTIFICATE != '' && env.MACOS_CERTIFICATE_PWD != '' }}
         uses: Apple-Actions/import-codesign-certs@v6
         with:
-          p12-file-base64: ${{ secrets.MACOS_CERTIFICATE }}
-          p12-password: ${{ secrets.MACOS_CERTIFICATE_PWD }}
+          p12-file-base64: ${{ env.MACOS_CERTIFICATE }}
+          p12-password: ${{ env.MACOS_CERTIFICATE_PWD }}
 
       - name: Cache Nix store
         uses: cachix/cachix-action@v16