on: push jobs: a: runs-on: ubuntu-latest env: A: ${{ secrets.x }} steps: [{run: a}]