diff --git a/sources/org.osbuild.curl b/sources/org.osbuild.curl
index 230bb84f..d8103ef1 100755
--- a/sources/org.osbuild.curl
+++ b/sources/org.osbuild.curl
@@ -113,7 +113,7 @@ class CurlSource(sources.SourceService):
             # rhsm secrets only need to be retrieved once and can then be reused
             if self.subscriptions is None:
                 self.subscriptions = Subscriptions.from_host_system()
-            desc["secrets"] = self.subscriptions.get_secrets(desc.get("desc"))
+            desc["secrets"] = self.subscriptions.get_secrets(desc.get("url"))
         elif desc.get("secrets", {}).get("name") == "org.osbuild.mtls":
             key = os.getenv("OSBUILD_SOURCES_CURL_SSL_CLIENT_KEY")
             cert = os.getenv("OSBUILD_SOURCES_CURL_SSL_CLIENT_CERT")