diff --git a/.github/workflows/reusable-deploy-web-preview.yml b/.github/workflows/reusable-deploy-web-preview.yml
index 81cb8d2f08..bd6dabb6c4 100644
--- a/.github/workflows/reusable-deploy-web-preview.yml
+++ b/.github/workflows/reusable-deploy-web-preview.yml
@@ -36,10 +36,9 @@ on:
         description: Firebase site for hosting
         type: string
         default: ${{vars.FIREBASE_HOSTING_TARGET}}
-      firebase-service-account:
-        description: Service account passed from outside organisation
-        type: string
-        default: ${{secrets.FIREBASE_SERVICE_ACCOUNT}}
+    secrets:  # Declare secrets you expect to receive
+      FIREBASE_SERVICE_ACCOUNT:
+        required: true
 
 jobs:
   build_action:
@@ -105,7 +104,7 @@ jobs:
         uses: FirebaseExtended/action-hosting-deploy@v0
         with:
           repoToken: "${{ secrets.GITHUB_TOKEN }}"
-          firebaseServiceAccount: "${{ inputs.firebase-service-account }}"
+          firebaseServiceAccount: "${{ secrets.FIREBASE_SERVICE_ACCOUNT }}"
           projectId: "${{ env.FIREBASE_PROJECT_ID }}"
           channelId: "${{ env.FIREBASE_HOSTING_CHANNEL }}"
           target: "${{inputs.firebase-host}}"