Variables & secrets

Per-project environment values, referenced from Gherkin steps as {{var:NAME}} / {{secret:NAME}} and injected as environment values into runs and generation. Names must be valid environment names ([A-Za-z_][A-Za-z0-9_]*).

Variables are plaintext and readable back. Secrets are write-only: encrypted at rest, values never returned by any API, decrypted only server-side at dispatch.

info

Installed plugins may require specific names (their requires list) — list_plugins tells you which are still unset.

Operation	What it does
list_variables	The project's variables with their values.
set_variable	Create or update a variable.
delete_variable	Delete a variable.
list_secrets	The project's secret names (never values).
set_secret	Create or update a secret (encrypted, write-only).
delete_secret	Delete a secret.