diff --git a/.woodpecker.yml b/.woodpecker.yml
index f563ca1..cbd897c 100644
--- a/.woodpecker.yml
+++ b/.woodpecker.yml
@@ -63,26 +63,26 @@ steps:
         cd "$ROOT"
         export IMG_TAG="$TAG"
 
-        read -r -a SECRETS <<'EOF'
-        JWT_SECRET
-        OPENAI_API_KEY
-        ONET_USERNAME
-        ONET_PASSWORD
-        STRIPE_SECRET_KEY
-        STRIPE_PUBLISHABLE_KEY
-        STRIPE_WH_SECRET
-        STRIPE_PRICE_PREMIUM_MONTH
-        STRIPE_PRICE_PREMIUM_YEAR
-        STRIPE_PRICE_PRO_MONTH
-        STRIPE_PRICE_PRO_YEAR
-        DB_HOST
-        DB_PORT
-        DB_USER
-        DB_PASSWORD
-        TWILIO_ACCOUNT_SID
-        TWILIO_AUTH_TOKEN
-        TWILIO_MESSAGING_SERVICE_SID
-        EOF
+        SECRETS=(
+          JWT_SECRET
+          OPENAI_API_KEY
+          ONET_USERNAME
+          ONET_PASSWORD
+          STRIPE_SECRET_KEY
+          STRIPE_PUBLISHABLE_KEY
+          STRIPE_WH_SECRET
+          STRIPE_PRICE_PREMIUM_MONTH
+          STRIPE_PRICE_PREMIUM_YEAR
+          STRIPE_PRICE_PRO_MONTH
+          STRIPE_PRICE_PRO_YEAR
+          DB_HOST
+          DB_PORT
+          DB_USER
+          DB_PASSWORD
+          TWILIO_ACCOUNT_SID
+          TWILIO_AUTH_TOKEN
+          TWILIO_MESSAGING_SERVICE_SID
+        )
 
         echo "🔐 Pulling secrets from Secret Manager"
         for S in "${SECRETS[@]}"; do