move around which job is downloading the secure files and which isn;t

.gitlab-ci.yml

@@ -7,20 +7,17 @@ stages:
   - pre-build
   - build
 
+variables:
+    SECURE_FILES_DOWNLOAD_PATH: '.secure'
+
 get-credentials:
   stage: pre-build
   image: ubuntu:jammy
-  variables:
-    SECURE_FILES_DOWNLOAD_PATH: '.secure'
   before_script:
     - apt-get update && apt-get upgrade -y && apt-get install curl -y
   script:
     - echo "Copying secure file with FeBio login ..."
     - curl --silent "https://gitlab.com/gitlab-org/incubation-engineering/mobile-devops/download-secure-files/-/raw/main/installer" | bash
-    - export USERNAME=$(grep 'username:' ${SECURE_FILES_DOWNLOAD_PATH}/febio_login.txt | cut -d ':' -f2 | tr -d ' ')
-    - export PASSWORD=$(grep 'password:' ${SECURE_FILES_DOWNLOAD_PATH}/febio_login.txt | cut -d ':' -f2 | tr -d ' ')
-    - echo "Extracted username $USERNAME"
-    - echo "Extracted password $PASSWORD"
 
 docker-build:
   stage: build
@@ -30,6 +27,8 @@ docker-build:
   dependencies: 
     - get-credentials
   script:
+    - export USERNAME=$(grep 'username:' ${SECURE_FILES_DOWNLOAD_PATH}/febio_login.txt | cut -d ':' -f2 | tr -d ' ')
+    - export PASSWORD=$(grep 'password:' ${SECURE_FILES_DOWNLOAD_PATH}/febio_login.txt | cut -d ':' -f2 | tr -d ' ')
     - docker pull $CI_REGISTRY_IMAGE:latest || true
     - docker build --build-arg BUILDKIT_INLINE_CACHE=1 --build-arg USERNAME=${USERNAME} --build-arg PASSWORD=${PASSWORD} --cache-from $CI_REGISTRY_IMAGE:latest --tag $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA --tag $CI_REGISTRY_IMAGE:latest .
     - docker push $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA