diff --git a/.woodpecker/build.yaml b/.woodpecker/build.yaml
index 4cdb798..3637613 100644
--- a/.woodpecker/build.yaml
+++ b/.woodpecker/build.yaml
@@ -3,12 +3,14 @@ when:
 
 skip_clone: true
 
-# matrix:
-#   include:
-#     - PLATFORM: rhel-9
-#       PLATFORM_ID: el9
-#     - PLATFORM: centos-8
-#       PLATFORM_ID: el8
+matrix:
+  include:
+    - PLATFORM: rhel-9
+      BLOCK: 650:1050
+    # - PLATFORM: rhel-9
+    #   BLOCK: 1051:1450
+    # - PLATFORM: rhel-9
+    #   BLOCK: 1451:1450
 #     - PLATFORM: ubuntu-2204
 #       PLATFORM_ID: 2204
 #     - PLATFORM: ubuntu-2404
@@ -16,7 +18,7 @@ skip_clone: true
 #     - PLATFORM: opensuse-155
 #       PLATFORM_ID: suse155
 steps:
-  - name: Build binaries
+  - name: "Build binaries (${PLATFORM}: ${BLOCK})"
     secrets: [red_hat_dev_pw, aws_access_key_id, aws_secret_access_key, pgpass, git_ro_token]
     image: docker.io/pats22/arm-binaries-r-ubi9
     pull: true
@@ -44,7 +46,7 @@ steps:
       # more complicated system dependencies which pak cannot resolve
       - mkdir -p /mnt/cache/pkgcache /mnt/cache/R-pkgs /mnt/cache/ccache /mnt/cache/packages
       # set additional repos: important as otherwise some packages cannot be resolved (e.g. INLA). Also: setting our own binary repos so we can make use of them for dep installation at some point
-      - R -q -e 'options(crayon.enabled = TRUE, Ncpus = 6, future.globals.onReference = "error", repos = structure(c(getOption("repos"),INLA="https://inla.r-inla-download.org/R/stable"))); pkgs = tools::CRAN_package_db()[[1]][650:1050]; library(rBinaries); future::plan("multisession", workers = 6, rscript_startup = quote(options(crayon.enabled = TRUE))); foo = lapply(pkgs, function(x) build_binary_package(x, build_for_minor=FALSE, debug = FALSE, force = TRUE))'
+      - R -q -e 'options(crayon.enabled = TRUE, Ncpus = 6, future.globals.onReference = "error", repos = structure(c(getOption("repos"),INLA="https://inla.r-inla-download.org/R/stable"))); pkgs = tools::CRAN_package_db()[[1]][${BLOCK}]; library(rBinaries); future::plan("multisession", workers = 6, rscript_startup = quote(options(crayon.enabled = TRUE))); foo = lapply(pkgs, function(x) build_binary_package(x, build_for_minor=FALSE, debug = FALSE, force = TRUE))'
     backend_options:
       kubernetes:
         resources:
diff --git a/.woodpecker/images.yaml b/.woodpecker/images.yaml
index 2090f3e..3bc1e72 100644
--- a/.woodpecker/images.yaml
+++ b/.woodpecker/images.yaml
@@ -4,9 +4,9 @@ when:
     name: images
 
 steps:
-  "Build image":
+  'Build image':
     image: woodpeckerci/plugin-docker-buildx:4.2.0
-    secrets: [red_hat_dev_pw]
+    secrets: [RED_HAT_DEV_PW]
     settings:
       platforms: linux/arm64
       Dockerfile: docker/Dockerfile-ubi9
@@ -16,6 +16,8 @@ steps:
       username: pats22
       password:
         from_secret: dockerhub_token_pats22
+      build_args_from_env:
+        - RED_HAT_DEV_PW
     backend_options:
       kubernetes:
         resources:
@@ -26,4 +28,4 @@ steps:
             memory: 800Mi
             cpu: 1000m
         nodeSelector:
-          kubernetes.io/arch: 'arm64'
\ No newline at end of file
+          kubernetes.io/arch: 'arm64'