We needed to filter the environment coming from a env file, but declared as secet in `secret-vars` label fix #17