diff --git a/.woodpecker/.build.yml b/.woodpecker/.build.yml
index 50e38c3..a7acab9 100644
--- a/.woodpecker/.build.yml
+++ b/.woodpecker/.build.yml
@@ -13,12 +13,6 @@ variables:
   ## ref: https://github.com/GoogleContainerTools/distroless#debian-12
   - &target_platforms 'linux/amd64,linux/arm,linux/arm64,linux/ppc64le,linux/s390x'
 
-## kind of fixup (remove in near future)
-## ref: https://github.com/woodpecker-ci/plugin-git/releases
-clone:
-  git:
-    image: quay.krd.sh/docker_io/woodpeckerci/plugin-git:2.5.1
-
 ## NB: ${variable} expressions are subject to pre-processing.
 ## ref: https://woodpecker-ci.org/docs/usage/environment
 
@@ -36,12 +30,14 @@ steps:
   - name: build-all
     image: *go_image
     environment:
+      GOPROXY: "${GOPROXY},direct"
+      GOSUMDB: "${GOSUMDB}"
+      GOPRIVATE: "${GOPRIVATE}"
       GOMAXPROCS: "4"
       MALLOC_ARENA_MAX: "4"
       ##
       TARGET_PLATFORMS: *target_platforms
     ## these secrets are server-wide
-    secrets: [ GOPRIVATE, GOPROXY, GOSUMDB ]
     commands:
       - .ci/build-all.sh
 
diff --git a/.woodpecker/.latest.yml b/.woodpecker/.latest.yml
index 38d6ef6..e3422c6 100644
--- a/.woodpecker/.latest.yml
+++ b/.woodpecker/.latest.yml
@@ -7,12 +7,6 @@ variables:
   - &ext_image_name 'docker.io/rockdrilla/rngpotd'
   - &skopeo_image 'quay.krd.sh/quay_io/containers/skopeo:v1.15.2'
 
-## kind of fixup (remove in near future)
-## ref: https://github.com/woodpecker-ci/plugin-git/releases
-clone:
-  git:
-    image: quay.krd.sh/docker_io/woodpeckerci/plugin-git:2.5.1
-
 ## NB: ${variable} expressions are subject to pre-processing.
 ## ref: https://woodpecker-ci.org/docs/usage/environment