If you’re still using drone 0.8.x be careful when reading the plugin marketplace documentation. The marketplace doco has been upgraded to use the new yaml format for 1.0.x.
Specifically in my case I was trying to pass in username and password secrets when using the webhook plugin.
Due to the documentation misalignment I had been incorrectly using the new format:
Rather that the 0.8.x format: