Are you sure that you add environment variables to repository hosting? Because .env files should be hidden. It could be reason.