---
kind: pipeline
name: default

platform:
  os: linux
  arch: amd64

steps:
- name: docker
  pull: if-not-exists
  image: plugins/docker
  settings:
    repo: octocat/hello-world
  environment:
    DOCKER_PASSWORD:
      from_secret: docker_password
    DOCKER_USERNAME:
      from_secret: docker_username

---
kind: secret
name: docker_password

get:
  path: secret/docker/password

---
kind: secret
name: docker_username

get:
  path: secret/docker/username

...