more secret changes

Author: marcoacierno

.github/workflows/deploy.yml

@@ -329,8 +329,9 @@ jobs:
             CMS_ADMIN_HOST=${{ fromJSON('["pastaporto-", ""]')[github.ref == 'refs/heads/main'] }}admin.pycon.it
             CMS_HOSTNAME=${{ steps.vars.outputs.cms_hostname }}
             CONFERENCE_CODE=${{ steps.vars.outputs.conference_code }}
-            SENTRY_AUTH_TOKEN=${{ steps.vars.outputs.sentry_auth_token }}
             GIT_HASH=${{ steps.git.outputs.githash }}
+          secrets: |
+            "sentry_auth_token=${{ steps.vars.outputs.sentry_auth_token }}"
 
   deploy-fe:
     runs-on: ubuntu-24.04

frontend/Dockerfile

@@ -24,7 +24,9 @@ WORKDIR /app
 COPY --from=deps /app/node_modules ./node_modules
 COPY . .
 
-RUN corepack enable pnpm && pnpm run build
+RUN corepack enable pnpm
+RUN --mount=type=secret,id=sentry_auth_token,env=SENTRY_AUTH_TOKEN \
+    pnpm run build
 
 FROM base AS runner
 WORKDIR /app