Usage Scenario
Use secret values in build spec
How to Set Up
We should never use secret value directly in build spec as otherwise everyone with permission to read code can know the secret. Instead we define it in build setting, and reference it via variables
- Define a secret say db-password in build setting:
We specify authorized branches as master, meaning that only build spec from master branch can access this secret
- Now reference the secret from build spec via variable. For instance:
