Security

Secret

A secret is sensitive information such as a password, token, or private key that must be restricted to authorized users and workloads. CI secret handling includes storage, scoped injection, logging controls, and eventual rotation.

Also known as: secrets

Why it matters

CI often handles powerful credentials whose exposure could compromise downstream systems.

Practical example

Avoid printing tokens and restrict which events can trigger jobs that receive deployment credentials.

Related terms

Sources

Definition reviewed .

Start with $10 in free credits

Change the runner label in your workflow and keep the rest of your GitHub Actions setup. Runner time is billed per minute.

← Return to glossary