diff --git a/woodpecker.yml b/woodpecker.yml
index 86e849b..7a54256 100644
--- a/woodpecker.yml
+++ b/woodpecker.yml
@@ -1,4 +1,4 @@
-# 凭据通过 Woodpecker Secret 注入（harbor_user / harbor_password），
+# 凭据通过 Woodpecker Secret 注入（HARBOR_USERNAME / HARBOR_PASSWORD），
 # 不再把 Harbor 账号密码 base64 后写进流水线脚本。
 # 镜像推送只在 push / manual 触发：pull_request 不应向生产 registry 推送。
 
@@ -45,10 +45,10 @@ steps:
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
     environment:
-      HARBOR_USER:
-        from_secret: harbor_user
+      HARBOR_USERNAME:
+        from_secret: HARBOR_USERNAME
       HARBOR_PASSWORD:
-        from_secret: harbor_password
+        from_secret: HARBOR_PASSWORD
     commands: |
       PROJECT_VERSION=$(cat $CI_WORKSPACE/project_version.txt)
       MODULE_NAME=ln-bi
@@ -60,6 +60,6 @@ steps:
       cd $CI_WORKSPACE
       docker build -t $REGISTRY/$PROJECT/$MODULE_NAME:$PROJECT_VERSION .
 
-      echo "$HARBOR_PASSWORD" | docker login $REGISTRY -u "$HARBOR_USER" --password-stdin
+      echo "$HARBOR_PASSWORD" | docker login $REGISTRY -u "$HARBOR_USERNAME" --password-stdin
 
       docker push $REGISTRY/$PROJECT/$MODULE_NAME:$PROJECT_VERSION