populating PUSH_TOKEN

.woodpecker.yml

@@ -4,10 +4,10 @@ clone:
     depth: 1
 pipeline:
   build:
-    image: docker:20.10.16 # fix at least major here
+    image: docker
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
-    environment:
-      - PUSH_TOKEN=$${PUSH_TOKEN}
+    secrets:
+      - AUTH_TOKEN
     commands:
       - /bin/sh build.sh

build.sh

@@ -24,8 +24,8 @@ docker buildx build \
     -t $CONTAINER_HOST/$CONTAINER_USER/$CONTAINER_NAME:$(date -I) \
     .
 
-echo "push token: $PUSH_TOKEN"
+echo "push token: $(cat /run/secrets/PUSH_TOKEN)"
 
-echo "$PUSH_TOKEN" | docker login -u=$CONTAINER_USER --password-stdin $CONTAINER_HOST
+cat /run/secrets/PUSH_TOKEN | docker login -u=$CONTAINER_USER --password-stdin $CONTAINER_HOST
 
 #docker push -a $CONTAINER_HOST/$CONTAINER_USER/$CONTAINER_NAME