diff --git a/.github/deployment/Dockerfile-affine b/.github/deployment/Dockerfile-affine
index e0bb7e9edf..76c317d6c8 100644
--- a/.github/deployment/Dockerfile-affine
+++ b/.github/deployment/Dockerfile-affine
@@ -1,4 +1,5 @@
 FROM node:16-alpine as builder
+ARG HUBSPOT_API_SECRET
 WORKDIR /app
 RUN apk add git && npm i -g pnpm@7
 COPY . .
diff --git a/.github/workflows/livedemo.yml b/.github/workflows/livedemo.yml
index d5ed5b9987..432fbaf13d 100644
--- a/.github/workflows/livedemo.yml
+++ b/.github/workflows/livedemo.yml
@@ -1,4 +1,4 @@
-name: Build AFFiNE-Local
+name: Build AFFiNE-Livedemo
 
 on:
     push:
@@ -64,14 +64,14 @@ jobs:
 
             - name: Build and push Docker image (AFFINE-Local)
               uses: docker/build-push-action@v3
-              env:
-                HUBSPOT_API_SECRET: ${{ secrets.SuperSecret }}
               with:
                   context: .
                   push: true
                   file: ./.github/deployment/Dockerfile-affine
                   tags: ${{ env.LOCAL_CACHE }}
                   target: AFFiNE
+                  build-args: |
+                    HUBSPOT_API_SECRET=${{ secrets.HUBSPOT_API_SECRET }}
 
             - name: Build and push Docker image (AFFINE-Local)
               uses: docker/build-push-action@v3