diff --git a/.expeditor/buildkite/coverage.sh b/.expeditor/buildkite/coverage.sh
index d5afb917..9da085c0 100755
--- a/.expeditor/buildkite/coverage.sh
+++ b/.expeditor/buildkite/coverage.sh
@@ -11,10 +11,5 @@ echo "--- bundle install"
 bundle install --jobs=7 --retry=3 --without tools integration
 
 echo "+++ bundle exec rake"
-export CI_NAME=Buildkite
-export CI_BUILD_NUMBER=$BUILDKITE_BUILD_NUMBER
-export CI_BUILD_URL=$BUILDKITE_BUILD_URL
-export CI_BRANCH=$BUILDKITE_BRANCH
-
 bundle exec rake
 
diff --git a/.expeditor/config.yml b/.expeditor/config.yml
index 33213850..69b35952 100644
--- a/.expeditor/config.yml
+++ b/.expeditor/config.yml
@@ -58,6 +58,14 @@ pipelines:
 
   - coverage:
       description: Generate test coverage report
-      public: true
+      secrets:
+        coveralls:
+          path: secret/coveralls/train
+          field: repo_token
       env:
        - CI_ENABLE_COVERAGE: true
+       - CI_NAME: Buildkite
+       - CI_BUILD_NUMBER: $BUILDKITE_BUILD_NUMBER
+       - CI_BUILD_URL: $BUILDKITE_BUILD_URL
+       - CI_BRANCH: $BUILDKITE_BRANCH
+