diff --git a/blueprint.cue b/blueprint.cue
index 7759ba4..204762d 100644
--- a/blueprint.cue
+++ b/blueprint.cue
@@ -9,10 +9,6 @@ ci: {
 			credentials: {
 				provider: "aws"
 				path:     "global/ci/docker"
-				maps: {
-					username: "username"
-					password: "password"
-				}
 			}
 		}
 		earthly: {
diff --git a/forge/actions/setup/action.yml b/forge/actions/setup/action.yml
index 7de4cd6..e00c4db 100644
--- a/forge/actions/setup/action.yml
+++ b/forge/actions/setup/action.yml
@@ -100,7 +100,7 @@ runs:
         EARTHLY=$(echo "$BP" | jq -r .ci.providers.earthly.credentials)
         if [[ "$EARTHLY" != "null" ]]; then
           SECRET=$(forge secret get -b . ci.providers.earthly.credentials)
-          TOKEN=$(echo "$EARTHLY" | jq -r .token)
+          TOKEN=$(echo "$SECRET" | jq -r .token)
 
           if [[ "$TOKEN" == "null" ]]; then
             echo "Error: the earthly provider secret must map the secret value to 'token'"