diff --git a/.github/workflows/diflow.yaml b/.github/workflows/diflow.yaml
index 5f3922882..f38ad9ba3 100644
--- a/.github/workflows/diflow.yaml
+++ b/.github/workflows/diflow.yaml
@@ -27,4 +27,6 @@ jobs:
       - name: Diflow run (don't push)
         run: |
           cd diflow
-          node dist/diflow.js sync -r https://${SECRET}@github.com/dbgate/dbgate-diflow-config.git -b master --skip-push --secret "xxxx"
+          node dist/diflow.js sync -r https://${SECRET}@github.com/dbgate/dbgate-diflow-config.git -b master --skip-push --secret 
+        env:
+          DIFLOW_GIT_SECRET: '${{ secrets.GH_TOKEN }}'
diff --git a/workflow-templates/diflow.yaml b/workflow-templates/diflow.yaml
index 0f34eeaa2..5bebbab9d 100644
--- a/workflow-templates/diflow.yaml
+++ b/workflow-templates/diflow.yaml
@@ -30,4 +30,7 @@ jobs:
       - name: Diflow run (don't push)
         run: |
           cd diflow
-          node dist/diflow.js sync -r https://${SECRET}@github.com/dbgate/dbgate-diflow-config.git -b master --skip-push --secret "xxxx"
+          node dist/diflow.js sync -r https://${SECRET}@github.com/dbgate/dbgate-diflow-config.git -b master --skip-push --secret 
+        env:
+          DIFLOW_GIT_SECRET: '${{ secrets.GH_TOKEN }}'
+