What Is a Redacted Variable?
A redacted variable is a configuration value flagged as sensitive so the CI/CD platform conceals it in logs, run output, and the interface. Unlike an ordinary variable, its value is not echoed and is masked if it appears in output. The flag tells the system to treat the value with secret-like care.
Why it matters
Some values are not full secrets yet still should not be broadcast, like internal hostnames or tokens. Marking them redacted prevents casual exposure without separate secret storage.
Related guides
What Is Masked Log Output?Masked log output is when a CI system replaces known secret values in build logs with placeholders, keeping c…
What Is a Pipeline Secret Scope?A pipeline secret scope defines which jobs, stages, or environments may read a given secret, narrowing exposu…
What Is an Environment-Scoped Secret?An environment-scoped secret is a credential bound to one deployment environment, so a job can read it only w…