secrets.yml
hook into scss pipeline