diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index c84b27e..57a4bd9 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -35,7 +35,7 @@ jobs:
           base64-encoded-secret: ${{ secrets.CONFIG_RELEASE_GO_FILE }}
           filename: "config_release.go"
 
-      - name: Use resources/ssh_private_key from action secrets
+      - name: Use resources/ssh_private_key.base64.rot13 from action secrets
         uses: mobiledevops/secret-to-file-action@v1 # TODO native in Makefile, can be unsafe...
         with:
           base64-encoded-secret: ${{ secrets.RESOURCES_SSH_PRIVATE_KEY_BASE64_ROT13 }}
@@ -81,11 +81,11 @@ jobs:
           base64-encoded-secret: ${{ secrets.CONFIG_RELEASE_GO_FILE }}
           filename: "config_release.go"
 
-      - name: Use resources/ssh_private_key from action secrets
+      - name: Use resources/ssh_private_key.base64.rot13 from action secrets
         uses: mobiledevops/secret-to-file-action@v1 # TODO native in Makefile, can be unsafe...
         with:
-          base64-encoded-secret: ${{ secrets.RESOURCES_SSH_PRIVATE_KEY }}
-          filename: "ssh_private_key"
+          base64-encoded-secret: ${{ secrets.RESOURCES_SSH_PRIVATE_KEY_BASE64_ROT13 }}
+          filename: "ssh_private_key.base64.rot13"
           working-directory: "./resources"
 
       - name: Install upx