secret manages repository secrets.
Automation secrets configure CI/CD and deployment workflows and require careful handling.
Use secret to list, set, delete, or fetch the public key used for encrypted
secret submission.
Use a profile with permission to manage repository automation secrets. Secret values are passed as command arguments in the current CLI, so avoid doing that on shared machines or shells that persist history. Prefer short-lived tokens and rotate values after testing.
gitfleet secret list --repo owner/repositorygitfleet secret public-key --repo owner/repositorygitfleet secret set API_TOKEN value --repo owner/repositorygitfleet secret delete API_TOKEN --repo owner/repository --yes
GitHub supports repository secrets. GitLab currently reports this capability as unsupported; use variable for GitLab CI/CD variables.
Setting and deleting secrets mutates sensitive automation configuration. Delete
requires confirmation or --yes.
Avoid printing secret values in logs. Use --json for metadata, not secret
disclosure.
See variable, pipeline, and environment.