From 2651a0fd1466fa4baaf544e76fedc5cb4146e667 Mon Sep 17 00:00:00 2001
From: Forketyfork <forketyfork@icloud.com>
Date: Sat, 27 Dec 2025 08:32:18 +0100
Subject: [PATCH] Fix secrets check in release workflow

---
 .github/workflows/release.yaml | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 338ba85..5d56a0b 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -37,11 +37,14 @@ jobs:
             experimental-features = nix-command flakes
 
       - name: Import code-signing certificate
-        if: ${{ secrets.MACOS_CERTIFICATE != '' && secrets.MACOS_CERTIFICATE_PWD != '' }}
+        env:
+          MACOS_CERTIFICATE: ${{ secrets.MACOS_CERTIFICATE }}
+          MACOS_CERTIFICATE_PWD: ${{ secrets.MACOS_CERTIFICATE_PWD }}
+        if: ${{ env.MACOS_CERTIFICATE != '' && env.MACOS_CERTIFICATE_PWD != '' }}
         uses: Apple-Actions/import-codesign-certs@v6
         with:
-          p12-file-base64: ${{ secrets.MACOS_CERTIFICATE }}
-          p12-password: ${{ secrets.MACOS_CERTIFICATE_PWD }}
+          p12-file-base64: ${{ env.MACOS_CERTIFICATE }}
+          p12-password: ${{ env.MACOS_CERTIFICATE_PWD }}
 
       - name: Cache Nix store
         uses: cachix/cachix-action@v16