make linking a repo use a secret