diff --git a/apps/base/woodpecker/vaultstaticsecret.yaml b/apps/base/woodpecker/vaultstaticsecret.yaml
index 763dd74..80f49bc 100644
--- a/apps/base/woodpecker/vaultstaticsecret.yaml
+++ b/apps/base/woodpecker/vaultstaticsecret.yaml
@@ -15,3 +15,20 @@ spec:
   refreshAfter: 5m
   type: kv-v2
   vaultAuthRef: default
+---
+apiVersion: secrets.hashicorp.com/v1beta1
+kind: VaultStaticSecret
+metadata:
+  name: woodpecker-agent-secret
+  namespace: woodpecker
+spec:
+  destination:
+    create: true
+    name: woodpecker-agent-secret
+    overwrite: true
+  hmacSecretData: true
+  mount: kv
+  path: service/woodpecker/woodpecker-agent-secret
+  refreshAfter: 5m
+  type: kv-v2
+  vaultAuthRef: default