diff --git a/.drone.yml b/.drone.yml
index 54c7254..62cebb5 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -5,6 +5,8 @@
 kind: pipeline
 type: kubernetes
 name: Show helmfile diffs
+environment:
+  HELM_SECRETS_VERSION: v4.3.0
 
 trigger:
   branch:
@@ -20,6 +22,7 @@ steps:
     KUBECONFIG_CONTENT:
       from_secret: KUBECONFIG_CONTENT
   commands:
+    - helm plugin install https://github.com/jkroepke/helm-secrets --version $HELM_SECRETS_VERSION
     - mkdir $HOME/.kube
     - echo $KUBECONFIG_CONTENT | base64 -d > $HOME/.kube/config
     - helmfile -e badhouseplants diff
@@ -30,6 +33,7 @@ steps:
     KUBECONFIG_CONTENT:
       from_secret: KUBECONFIG_CONTENT
   commands:
+    - helm plugin install https://github.com/jkroepke/helm-secrets --version $HELM_SECRETS_VERSION
     - mkdir $HOME/.kube
     - echo $KUBECONFIG_CONTENT | base64 -d > $HOME/.kube/config
     - helmfile -e etersoft diff
@@ -41,6 +45,8 @@ steps:
 kind: pipeline
 type: kubernetes
 name: Apply helmfile changes
+environment:
+  HELM_SECRETS_VERSION: v4.3.0
 
 trigger:
   branch:
@@ -55,6 +61,7 @@ steps:
     KUBECONFIG_CONTENT:
       from_secret: KUBECONFIG_CONTENT
   commands:
+    - helm plugin install https://github.com/jkroepke/helm-secrets --version $HELM_SECRETS_VERSION
     - mkdir $HOME/.kube
     - echo $KUBECONFIG_CONTENT | base64 -d > $HOME/.kube/config
     - helmfile -e badhouseplants apply
@@ -65,6 +72,7 @@ steps:
     KUBECONFIG_CONTENT:
       from_secret: KUBECONFIG_CONTENT
   commands:
+    - helm plugin install https://github.com/jkroepke/helm-secrets --version $HELM_SECRETS_VERSION
     - mkdir $HOME/.kube
     - echo $KUBECONFIG_CONTENT | base64 -d > $HOME/.kube/config
     - helmfile -e etersoft apply