diff --git a/plan/task/secretfile.go b/plan/task/secretfile.go
index 2aba3eb0..344b0f96 100644
--- a/plan/task/secretfile.go
+++ b/plan/task/secretfile.go
@@ -31,12 +31,12 @@ func (c secretFileTask) Run(ctx context.Context, pctx *plancontext.Context, _ so
 
 	lg.Debug().Str("path", secretFile.Path).Msg("loading secret")
 
-	data, err := os.ReadFile(secretFile.Path)
+	plaintext, err := os.ReadFile(secretFile.Path)
 	if err != nil {
 		return nil, err
 	}
 
-	secret := pctx.Secrets.New(string(data))
+	secret := pctx.Secrets.New(string(plaintext))
 	out := compiler.NewValue()
 	if err := out.FillPath(cue.ParsePath("contents"), secret.Value()); err != nil {
 		return nil, err