chore: update ci.buld.yml (#476)

* fix(security): remediate workflow vulnerability in .github/workflows/ci.buld.yml

* Apply suggestion from @paulinebm

* Apply suggestion from @paulinebm

---------

Co-authored-by: hf-security-analysis[bot] <265538906+hf-security-analysis[bot]@users.noreply.github.com>
Co-authored-by: Pauline Bailly-Masson <155966238+paulinebm@users.noreply.github.com>

Author: hf-security-analysis[bot]

.github/workflows/ci.buld.yml

@@ -51,8 +51,6 @@ jobs:
         run: |
           
           echo "IMAGE_TAG=${GITHUB_REF##*/}" >> $GITHUB_ENV
-          echo "DOCKER_USERNAME=$DOCKER_USERNAME" >> $GITHUB_ENV
-          echo "DOCKER_PASSWORD=$DOCKER_PASSWORD" >> $GITHUB_ENV
           if [[ $IS_MAIN == 'true' ]]; then
             echo "DOCKER_IMAGE=aisheets/sheets" >> $GITHUB_ENV
             echo "PLATFORMS=linux/amd64,linux/arm64" >> $GITHUB_ENV
@@ -65,17 +63,15 @@ jobs:
             echo "PLATFORMS=linux/amd64" >> $GITHUB_ENV
           fi
         env:
-          DOCKER_USERNAME: ${{ secrets.DOCKER_USERNAME }}
-          DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}
           IS_RELEASE: ${{ startsWith(github.ref, 'refs/tags/v') || github.ref == 'refs/heads/stable' }}
           IS_MAIN: ${{ github.ref == 'refs/heads/main' }}
 
 
       - name: Login to Docker Hub
         uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9  # v3
         with:
-          username: ${{ env.DOCKER_USERNAME }}
-          password: ${{ env.DOCKER_PASSWORD }}
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
 
       - name: Build and push image
         uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25  # v5
@@ -92,4 +88,4 @@ jobs:
           platforms: ${{ env.PLATFORMS }}
           tags: ${{ env.DOCKER_IMAGE }}:latest
           labels: ${{ steps.meta.outputs.labels }}
-          push: true
+          push: true