diff --git a/.github/workflows/diflow.yaml b/.github/workflows/diflow.yaml
index a00ed3c89..fa5c80a12 100644
--- a/.github/workflows/diflow.yaml
+++ b/.github/workflows/diflow.yaml
@@ -27,6 +27,6 @@ jobs:
       - name: Diflow run (don't push)
         run: |
           cd diflow
-          node dist/diflow.js sync -r https://${SECRET}@github.com/dbgate/dbgate-diflow-config.git -b master --skip-push
+          node dist/diflow.js sync -r https://DIFLOW_GIT_SECRET@github.com/dbgate/dbgate-diflow-config.git -b master --skip-push
         env:
           DIFLOW_GIT_SECRET: '${{ secrets.DIFLOW_GIT_SECRET }}'
diff --git a/workflow-templates/diflow.yaml b/workflow-templates/diflow.yaml
index bebce02b0..025a1099c 100644
--- a/workflow-templates/diflow.yaml
+++ b/workflow-templates/diflow.yaml
@@ -30,7 +30,7 @@ jobs:
       - name: Diflow run (don't push)
         run: |
           cd diflow
-          node dist/diflow.js sync -r https://${SECRET}@github.com/dbgate/dbgate-diflow-config.git -b master --skip-push
+          node dist/diflow.js sync -r https://DIFLOW_GIT_SECRET@github.com/dbgate/dbgate-diflow-config.git -b master --skip-push
         env:
           DIFLOW_GIT_SECRET: '${{ secrets.DIFLOW_GIT_SECRET }}'