ci: fix push-image secrets by loading them into envs first

Author: daronco

.github/workflows/push-image.yml

@@ -6,12 +6,16 @@ on:
       - "v*"
   workflow_dispatch:
 
+env:
+  SITE_URL: ${{ secrets.SITE_URL }}
+  SITE_URL_INTERNAL: ${{ secrets.SITE_URL_INTERNAL }}
+
 jobs:
   push-scan-public:
     uses: mconf/mconf-ci-jobs/.github/workflows/lb-push-scan-image.yml@main
     with:
       build-args: |
-        SITE_URL=${{ secrets.SITE_URL }}
+        SITE_URL=${{ env.SITE_URL }}
         SHOW_INTERNAL_APIS=false
       image-suffix: ''
       runs-on: '["ubuntu-22.04"]'
@@ -21,7 +25,7 @@ jobs:
     uses: mconf/mconf-ci-jobs/.github/workflows/lb-push-scan-image.yml@main
     with:
       build-args: |
-        SITE_URL=${{ secrets.SITE_URL_INTERNAL }}
+        SITE_URL=${{ env.SITE_URL_INTERNAL }}
         SHOW_INTERNAL_APIS=true
       image-suffix: '-internal'
       runs-on: '["ubuntu-22.04"]'