diff --git a/lib/workers/repository/index.ts b/lib/workers/repository/index.ts
index 5005a9ee5e36bf40b1c935fcc6f2b0589a99e2be..f0831ffb70d8cafd1f2ac597176c02cf8136bcda 100644
--- a/lib/workers/repository/index.ts
+++ b/lib/workers/repository/index.ts
@@ -1,5 +1,6 @@
 import fs from 'fs-extra';
 import { getGlobalConfig, setGlobalConfig } from '../../config/global';
+import { applySecretsToConfig } from '../../config/secrets';
 import type { RenovateConfig } from '../../config/types';
 import { logger, setMeta } from '../../logger';
 import { removeDanglingContainers } from '../../util/exec/docker';
@@ -30,7 +31,7 @@ export async function renovateRepository(
   canRetry = true
 ): Promise<ProcessResult> {
   splitInit();
-  let config = setGlobalConfig(repoConfig);
+  let config = setGlobalConfig(applySecretsToConfig(repoConfig));
   await removeDanglingContainers();
   setMeta({ repository: config.repository });
   logger.info({ renovateVersion }, 'Repository started');