[WIP] Use GitHub expressions, not env vars

D'oh

Author: thlehmann-ionos

.github/workflows/sbom.yaml

@@ -130,18 +130,18 @@ jobs:
         run: |
           wc --total=never -l bom.*.xml
 
-          echo "Upload to: ${DEPENDENCY_TRACK_BASE_URL}/api/v1/bom"
+          echo "Upload to: ${{ vars.DEPENDENCY_TRACK_BASE_URL }}/api/v1/bom"
 
           upload_bom() {
           	echo "Upload Nextcloud SBOM ${1} for object ${2} ..."
 
             curl \
               -D- \
-              -X POST "${DEPENDENCY_TRACK_BASE_URL}/api/v1/bom" \
+              -X POST "${{ vars.DEPENDENCY_TRACK_BASE_URL }}/api/v1/bom" \
               -H "Content-Type: multipart/form-data" \
-              -H "X-API-Key: ${DEPENDENCY_TRACK_API_KEY}" \
+              -H "X-API-Key: ${{ secrets.DEPENDENCY_TRACK_API_KEY }}" \
               -F "project=${2}" \
               -F "bom=@${1}"
           }
 
-          upload_bom "bom.nextcloud.xml" "${DT_OBJECT_NEXTCLOUD}"
+          upload_bom "bom.nextcloud.xml" "${{ vars.DT_OBJECT_NEXTCLOUD }}"