ci: don't run virustotal scan if key is missing [2]

diff --git a/.github/workflows/guix.yml b/.github/workflows/guix.yml
index f0e68463154c67afe5817da75c72e7bea58687dc..6c9b98fb5ba895c3580cd8e45437c4f084607b04 100644 (file)
--- a/.github/workflows/guix.yml
+++ b/.github/workflows/guix.yml
@@ -60,7 +60,9 @@ jobs:
       - name: build
         run: SUBSTITUTE_URLS='http://bordeaux.guix.gnu.org' HOSTS="${{ matrix.toolchain.target }}" ./contrib/guix/guix-build
       - name: virustotal scan
-        if: matrix.toolchain.target == 'x86_64-w64-mingw32' && secrets.VT_API_KEY != ''
+        env:
+          VT_API_KEY: ${{ secrets.VT_API_KEY }}
+        if: ${{ matrix.toolchain.target == 'x86_64-w64-mingw32' && env.VT_API_KEY != '' }}
         uses: crazy-max/ghaction-virustotal@v4
         with:
           vt_api_key: ${{ secrets.VT_API_KEY }}