diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 15bc2318..770ebb64 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -14,7 +14,7 @@ jobs:
           distribution: 'temurin'
           java-version: '21'
           server-id: 'nvd'
-          server-password: ${{ secrets.NVD_API_KEY }}
+          server-password: NVD_API_KEY
           cache: 'maven'
 
       - name: Setup Graphviz
@@ -45,6 +45,8 @@ jobs:
       - name: Run OWASP dependency-check (only on dev)
         run: mvn -q org.owasp:dependency-check-maven:check
         if: ${{ github.ref == 'refs/heads/dev' }}
+        env:
+          NVD_API_KEY: ${{ secrets.NVD_API_KEY }}
 
       - name: Set up for Maven Central deploy (master branch only)
         if: ${{ github.ref == 'refs/heads/master' }}