Would you not be better off doing this with GitHub actions and using secrets?