diff --git a/phase9_security.sh b/phase9_security.sh
index 357832e..79a9651 100755
--- a/phase9_security.sh
+++ b/phase9_security.sh
@@ -21,13 +21,13 @@ source "${SCRIPT_DIR}/lib/common.sh"
 load_env
 require_vars GITEA_ADMIN_TOKEN GITEA_INTERNAL_URL GITEA_ORG_NAME \
              GITEA_ADMIN_USER \
-             REPO_1_NAME REPO_2_NAME REPO_3_NAME \
+             REPO_NAMES \
              SEMGREP_VERSION TRIVY_VERSION GITLEAKS_VERSION \
              SECURITY_FAIL_ON_ERROR PROTECTED_BRANCH
 
 phase_header 9 "Security Scanning"
 
-REPOS=("$REPO_1_NAME" "$REPO_2_NAME" "$REPO_3_NAME")
+read -ra REPOS <<< "$REPO_NAMES"
 TEMP_BASE="/tmp/gitea-migration-security"
 GITEA_BASE_URL="${GITEA_INTERNAL_URL%/}"
 ASKPASS_SCRIPT=""