~sircmpwn/builds.sr.ht#221: Environment variable secrets

In addition to the current secret types (files and SSH/PGP keys), I would like to be able to add environment variables.

Currently, I'm putting values in a file and adding the following commands to all tasks, but this isn't very wieldy when there are many tasks in a manifest:

set +x
. ~/.buildsecrets
set -x

Status: REPORTED
Submitter: ~evhan
Assigned to: No-one
Submitted: 3 years ago
Updated: 7 months ago
Labels: No labels applied.

~deph0 3 years ago

This would be a great addition, thumbs up for this from me.

~tristan957 3 years ago

Thanks for the set workaround.

~colbyhub 2 years ago

Thanks for the workaround ~evhan, but native support would be really nice!

~ajhalili2006 7 months ago

For me, I usually use an secret management CLi (e.g. Doppler, HashiCorp Vault) and drop an init script or an prepared config for these as secret as workaround.