/

Integrations and API

Secrets and environment

Store tokens safely, scope them to a branch and keep them out of your logs.

updated

Oct 2, 2026

//

5 min read

Secrets are encrypted values that your steps can read as environment variables.

Add a secret

$ cinder secret set DEPLOY_TOKEN
$ cinder secret set DEPLOY_TOKEN
$ cinder secret set DEPLOY_TOKEN

Scope

  • A secret can be limited to one branch, for example main.

  • Secrets are not passed to runs from forks.

  • Mark a secret as production-only to hide it from preview builds.

Masking

Cinder masks secret values in logs, including common encodings. Masking is a safety net, so avoid printing a secret on purpose.

Still stuck? Try our AI support

Ask in plain words and get an answer from the docs. AI support by Chatbase, partner link.

Create a free website with Framer, the website builder loved by startups, designers and agencies.