diff --git a/.woodpecker/publish.yaml b/.woodpecker/publish.yaml
index a3421f2..78c4e2f 100644
--- a/.woodpecker/publish.yaml
+++ b/.woodpecker/publish.yaml
@@ -4,11 +4,16 @@ when:
 steps:
 - name: publish
   image: quay.io/podman/stable
+  environment:
+    REGISTRY: registry.mnl.de
+    REGISTRY_USER: mnl
+    REGISTRY_TOKEN:
+      from_secret: REGISTRY_TOKEN
+
   commands:
-  - export REGISTRY=registry.mnl.de
-  - export IMAGE_TAG="$REGISTRY/mnl/jdk21-builder:$CI_COMMIT_REF"
+  - export IMAGE_TAG="$REGISTRY/$REGISTRY_USER/jdk21-builder:$CI_COMMIT_REF"
   # - podman build -t $IMAGE_TAG .
-  - echo $REGISTRY_TOKEN | podman login -u mnl --password-stdin registry.mnl.de
+  - echo $REGISTRY_TOKEN | podman login -u $REGISTRY_USER --password-stdin $REGISTRY
   backend_options:
     kubernetes:
       securityContext: