diff --git a/.forgejo/workflows/renovate.yaml b/.forgejo/workflows/renovate.yaml
index f89d229..79adc8c 100644
--- a/.forgejo/workflows/renovate.yaml
+++ b/.forgejo/workflows/renovate.yaml
@@ -8,6 +8,9 @@ on:
     branches:
       - main
 
+env:
+  RENOVATE_GIT_PRIVATE_KEY: ${{ secrets.RENOVATE_GIT_PRIVATE_KEY }}
+
 jobs:
   renovate:
     runs-on: docker
@@ -19,6 +22,5 @@ jobs:
           RENOVATE_CONFIG_FILE: "/workspace/homelab/renovate-config/config.js" # replace it with your config.js path
           LOG_LEVEL: "debug"
           RENOVATE_CONFIG_MIGRATION: "true" # ensure all repositories receive config migration PRs
-          RENOVATE_GIT_PRIVATE_KEY: ${{ secrets.RENOVATE_GIT_PRIVATE_KEY }}
           RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }}
           GITHUB_COM_TOKEN: ${{ secrets.GH_TOKEN }}