diff --git a/.gitea/workflows/ci-test.yaml b/.gitea/workflows/ci-test.yaml
index 0f808a0..d2b02d7 100644
--- a/.gitea/workflows/ci-test.yaml
+++ b/.gitea/workflows/ci-test.yaml
@@ -128,7 +128,7 @@ jobs:
           bw config server https://vaultwarden.fenix-dev.com
           #BW_SESSION=$(bw login)
           bw login --apikey
-          BW_SESSION=$(bw unlock "$BW_PASSWORD" --raw)
+          BW_SESSION=$(bw unlock --passwordenv BW_PASSWORD)
 
       - name: vaultwarden getsecrets
         working-directory: infra/iac