diff --git a/.gitea/workflows/default.yaml b/.gitea/workflows/default.yaml
index 24d89715..4ef9ad01 100644
--- a/.gitea/workflows/default.yaml
+++ b/.gitea/workflows/default.yaml
@@ -56,12 +56,12 @@ jobs:
     steps:
       - name: Download and decrypt baserom
         run: |
-          curl -L "${{ secrets.BASEROM_US10_URL }}" -o baserom.us.v10.enc.z64
-          openssl enc -d -aes-256-cbc -in baserom.us.v10.enc.z64 -out baserom.us.v10.z64 -k "${{ secrets.BASEROM_US10_KEY}"
+          curl -L "${{ vars.BASEROM_US10_URL }}" -o baserom.us.v10.enc.z64
+          openssl enc -d -aes-256-cbc -in baserom.us.v10.enc.z64 -out baserom.us.v10.z64 -k "${{ vars.BASEROM_US10_KEY}"
           FILE_SHA1=$(sha1sum baserom.us.v10.z64 | awk '{ print $1 }')
           echo "Calculated SHA1 - $FILE_SHA1"
-          echo "Expected SHA1 - ${{ secrets.BASEROM_US10_SHA1 }}"
-          [ "$FILE_SHA1" != "${{ secrets.BASEROM_US10_SHA1 }}" ] && exit 1 || echo "Checksum verification passed"
+          echo "Expected SHA1 - ${{ vars.BASEROM_US10_SHA1 }}"
+          [ "$FILE_SHA1" != "${{ vars.BASEROM_US10_SHA1 }}" ] && exit 1 || echo "Checksum verification passed"
 
       - name: Compile
         run: make
@@ -70,8 +70,8 @@ jobs:
         run: |
           FILE_SHA1=$(sha1sum build/us.v10/banjo.us.v10.z64 | awk '{ print $1 }')
           echo "Calculated SHA1 - $FILE_SHA1"
-          echo "Expected SHA1 - ${{ secrets.BASEROM_US10_SHA1 }}"
-          [ "$FILE_SHA1" != "${{ secrets.BASEROM_US10_SHA1 }}" ] && exit 1 || echo "Checksum verification passed"
+          echo "Expected SHA1 - ${{ vars.BASEROM_US10_SHA1 }}"
+          [ "$FILE_SHA1" != "${{ vars.BASEROM_US10_SHA1 }}" ] && exit 1 || echo "Checksum verification passed"
 
   build-test-pal:
     name: Test PAL Build
@@ -82,12 +82,12 @@ jobs:
     steps:
       - name: Download and decrypt baserom
         run: |
-          curl -L "${{ secrets.BASEROM_PAL_URL }}" -o baserom.pal.enc.z64
-          openssl enc -d -aes-256-cbc -in baserom.pal.enc.z64 -out baserom.pal.z64 -k "${{ secrets.BASEROM_PAL_KEY}"
+          curl -L "${{ vars.BASEROM_PAL_URL }}" -o baserom.pal.enc.z64
+          openssl enc -d -aes-256-cbc -in baserom.pal.enc.z64 -out baserom.pal.z64 -k "${{ vars.BASEROM_PAL_KEY}"
           FILE_SHA1=$(sha1sum baserom.pal.z64 | awk '{ print $1 }')
           echo "Calculated SHA1 - $FILE_SHA1"
-          echo "Expected SHA1 - ${{ secrets.BASEROM_PAL_SHA1 }}"
-          [ "$FILE_SHA1" != "${{ secrets.BASEROM_PAL_SHA1 }}" ] && exit 1 || echo "Checksum verification passed"
+          echo "Expected SHA1 - ${{ vars.BASEROM_PAL_SHA1 }}"
+          [ "$FILE_SHA1" != "${{ vars.BASEROM_PAL_SHA1 }}" ] && exit 1 || echo "Checksum verification passed"
 
       - name: Compile
         run: make VERSION=pal