CI Variables
CI Variables are build-time environment variables that are injected into the CI pipeline during execution. Use them to pass configuration values, credentials, or parameters required by your build process.
Accessing CI Variables
- Open the workflow in the Workflow Builder.
- Locate the CI Variables option at the bottom-left corner of the interface.
- Click to open the CI Variables panel.
Variable List
The CI Variables panel displays a table of all defined build-time variables:
| Column | Description |
|---|---|
| Key | The variable name (e.g., API_KEY, NODE_ENV). |
| Value | The current value assigned to the variable. Secret values are masked unless you have the View secret permission. |
| Type | The variable type — Build Time. |
| Action | Edit or delete the variable. |
Managing Variables
Click the three-dot menu (...) at the top of the CI Variables panel to access management actions:
| Action | Description |
|---|---|
| Add | Create a new build-time variable. |
| Import | Import variables from a Git repository or upload a .env file. |
| Export | Export all current variables as a downloadable file. |
Adding a Variable
- Click Add from the actions menu.
- Fill in the following fields:
| Field | Description |
|---|---|
| Variable | The variable name (e.g., API_KEY). |
| Variable Type | Select Value. |
| Value | The variable value. |
| Secret | Toggle to mark the variable as a secret. Secret values are masked in the UI and synced with the connected secret manager (if configured). |
- Click Create to save, or Create and Add Another to add multiple variables in sequence.
Importing Variables
From Repository
- The integrated source repository (GitHub, GitLab, or Bitbucket) linked to the service is displayed.
- Select the branch containing your variable definitions.
- Click Proceed to import
.envfiles found in the repository.
Upload .env File
- Upload a
.envfile containing your variable definitions inKEY=VALUEformat. - Click Proceed to import the variables.
Exporting Variables
Click Export from the actions menu to download all defined CI variables as a file. This is useful for backup or transferring variables to another workflow.
Secret Manager Integration
When a secret manager is connected at the project level, CI variables marked as Secret are automatically synced with the external secret manager.
| Provider | Description |
|---|---|
| AWS Secrets Manager | Secret variables are stored and retrieved from AWS Secrets Manager. |
| GCP Secret Manager | Secret variables are stored and retrieved from Google Cloud Secret Manager. |
Secret manager integration is configured from the Project Settings page. It applies to all workflows and environments under that project. See Secret Manager Integration for setup details.