diff --git a/tasks/docker-registry/task.yaml b/tasks/docker-registry/task.yaml
index 6c41193..78e0bf6 100644
--- a/tasks/docker-registry/task.yaml
+++ b/tasks/docker-registry/task.yaml
@@ -80,24 +80,25 @@ spec:
       env:
         - name: DOCKER_CONFIG
           value: /tekton/home/.docker
-      script: |
-        #!/bin/sh
-        set -e
+        - name: PYPI_USERNAME
+          valueFrom:
+            secretKeyRef:
+              name: pypi-secret
+              key: username
+        - name: PYPI_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: pypi-secret
+              key: password
+      command:
+        - /kaniko/executor
+      args:
+        - --dockerfile=$(params.subdirectory)/$(params.dockerfile)
+        - --context=$(params.subdirectory)/$(params.context)
+        - --destination=$(params.imageName):$(params.tag)
+        - --skip-tls-verify
+        - --reproducible
+        - --verbosity=info
+        - --build-arg=PYPI_USERNAME=$(PYPI_USERNAME)
+        - --build-arg=PYPI_PASSWORD=$(PYPI_PASSWORD)
 
-        if [ -n "$(params.subdirectory)" ]; then
-          cd "$(params.subdirectory)"
-        fi
-
-        PYPI_USERNAME=$(cat /workspace/pypi-auth/username)
-        PYPI_PASSWORD=$(cat /workspace/pypi-auth/password)
-
-        echo "🚀 Running bitnami/kaniko build..."
-        /kaniko/executor \
-          --dockerfile=$(params.dockerfile) \
-          --context=$(params.context) \
-          --destination=$(params.imageName):$(params.tag) \
-          --skip-tls-verify \
-          --reproducible \
-          --verbosity=info \
-          --build-arg PYPI_USERNAME=$PYPI_USERNAME \
-          --build-arg PYPI_PASSWORD=$PYPI_PASSWORD