diff --git a/.ds.baseline b/.ds.baseline
index 9932a2fef..225bddf3e 100644
--- a/.ds.baseline
+++ b/.ds.baseline
@@ -133,7 +133,7 @@
         "filename": ".github/workflows/checks.yml",
         "hashed_secret": "5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8",
         "is_verified": false,
-        "line_number": 67,
+        "line_number": 79,
         "is_secret": false
       }
     ],
@@ -684,5 +684,5 @@
       }
     ]
   },
-  "generated_at": "2024-10-04T14:50:29Z"
+  "generated_at": "2024-10-04T19:31:46Z"
 }
diff --git a/.github/workflows/checks.yml b/.github/workflows/checks.yml
index ba0584567..44b74656e 100644
--- a/.github/workflows/checks.yml
+++ b/.github/workflows/checks.yml
@@ -59,6 +59,18 @@ jobs:
       pull-requests: write
       contents: write
     runs-on: ubuntu-latest
+    env:
+      API_HOST_NAME: https://notify-api-staging.app.cloud.gov/
+      DANGEROUS_SALT: ${{ secrets.DANGEROUS_SALT }}
+      SECRET_KEY: ${{ secrets.SECRET_KEY }}
+      ADMIN_CLIENT_SECRET: ${{ secrets.ADMIN_CLIENT_SECRET }}
+      ADMIN_CLIENT_USERNAME: notify-admin
+      NOTIFY_ENVIRONMENT: e2etest
+      NOTIFY_E2E_AUTH_STATE_PATH: ${{ secrets.NOTIFY_E2E_AUTH_STATE_PATH }}
+      NOTIFY_E2E_TEST_EMAIL: ${{ secrets.NOTIFY_E2E_TEST_EMAIL }}
+      NOTIFY_E2E_TEST_PASSWORD: ${{ secrets.NOTIFY_E2E_TEST_PASSWORD }}
+      NOTIFY_E2E_TEST_URI: http://localhost:6012/
+      VCAP_SERVICES: ${{ secrets.VCAP_SERVICES }}
     services:
       postgres:
         image: postgres
@@ -95,25 +107,25 @@ jobs:
           curl --fail -v https://notify-api-staging.app.cloud.gov || exit 1
       - name: Check if secret is present
         run: |
-          if [ -z "${{ secrets.E2E_BUCKET_NAME }}" ]; then
+          if [ -z "${E2E_BUCKET_NAME}" ]; then
             echo "E2E_BUCKET_NAME is empty or not set"
           else
             echo "E2E_BUCKET_NAME length is ${#E2E_BUCKET_NAME}"
           fi
-          if [ -z "${{ secrets.DANGEROUS_SALT }}" ]; then
+          if [ -z "${DANGEROUS_SALT}" ]; then
             echo "DANGEROUS_SALT is empty or not set"
           else
             echo "DANGEROUS_SALT length is ${#DANGEROUS_SALT}"
           fi
-          if [ -z "${{ secrets.NEW_RELIC_LICENSE_KEY }}" ]; then
+          if [ -z "${NEW_RELIC_LICENSE_KEY}" ]; then
             echo "NEW_RELIC_LICENSE_KEY is empty or not set"
           else
             echo "NEW_RELIC_LICENSE_KEY length is ${#NEW_RELIC_LICENSE_KEY}"
           fi
         env:
-          E2E_BUCKET_NAME: ${{ secrets.E2E_BUCKET_NAME }}
-          DANGEROUS_SALT: ${{ secrets.DANGEROUS_SALT }}
-          NEW_RELIC_LICENSE_KEY: ${{ secrets.NEW_RELIC_LICENSE_KEY }}
+          E2E_BUCKET_NAME: $E2E_BUCKET_NAME
+          DANGEROUS_SALT: $DANGEROUS_SALT
+          NEW_RELIC_LICENSE_KEY: ${NEW_RELIC_LICENSE_KEY}
       - name: Run Admin server
         # If we want to log stuff and see what's broken,
         # insert this line: