secrets.json only required for publish task