Use env over secrets

[Shard]

Github actions does not allow secrets to be passed to external PR

https://docs.github.com/en/actions/security-guides/encrypted-secrets#using-encrypted-secrets-in-a-workflow