[{"data":1,"prerenderedAt":445},["ShallowReactive",2],{"navigation":3,"\u002Fworkflows\u002Finputs-and-secrets":194,"\u002Fworkflows\u002Finputs-and-secrets-surround":440},[4,18,31,64,81,102,111,132,149],{"title":5,"path":6,"stem":7,"children":8,"page":17},"Getting started","\u002Fgetting-started","1.getting-started",[9,13],{"title":10,"path":11,"stem":12},"Introduction","\u002Fgetting-started\u002Fintroduction","1.getting-started\u002F1.introduction",{"title":14,"path":15,"stem":16},"Run your first workflow","\u002Fgetting-started\u002Fquickstart","1.getting-started\u002F2.quickstart",false,{"title":19,"path":20,"stem":21,"children":22,"page":17},"Core concepts","\u002Fconcepts","2.concepts",[23,27],{"title":24,"path":25,"stem":26},"The platform model","\u002Fconcepts\u002Fplatform","2.concepts\u002F1.platform",{"title":28,"path":29,"stem":30},"Architecture and boundaries","\u002Fconcepts\u002Farchitecture","2.concepts\u002F2.architecture",{"title":32,"path":33,"stem":34,"children":35,"page":17},"Installation","\u002Finstallation","3.installation",[36,40,44,48,52,56,60],{"title":37,"path":38,"stem":39},"Overview and requirements","\u002Finstallation\u002Foverview","3.installation\u002F1.overview",{"title":41,"path":42,"stem":43},"Local evaluation","\u002Finstallation\u002Flocal-evaluation","3.installation\u002F2.local-evaluation",{"title":45,"path":46,"stem":47},"Install the server","\u002Finstallation\u002Fserver","3.installation\u002F3.server",{"title":49,"path":50,"stem":51},"Install a runner","\u002Finstallation\u002Frunner","3.installation\u002F4.runner",{"title":53,"path":54,"stem":55},"Verify the installation","\u002Finstallation\u002Fverification","3.installation\u002F5.verification",{"title":57,"path":58,"stem":59},"Upgrade the platform","\u002Finstallation\u002Fupgrades","3.installation\u002F6.upgrades",{"title":61,"path":62,"stem":63},"Guided installer","\u002Finstallation\u002Finstaller","3.installation\u002F7.installer",{"title":65,"path":66,"stem":67,"children":68,"page":17},"Build workflows","\u002Fworkflows","4.workflows",[69,73,77],{"title":70,"path":71,"stem":72},"Build a Definition","\u002Fworkflows\u002Fdefinitions","4.workflows\u002F0.definitions",{"title":74,"path":75,"stem":76},"Deploy and run workflows","\u002Fworkflows\u002Fruns","4.workflows\u002F1.runs",{"title":78,"path":79,"stem":80},"Inputs, context, and secrets","\u002Fworkflows\u002Finputs-and-secrets","4.workflows\u002F2.inputs-and-secrets",{"title":82,"path":83,"stem":84,"children":85,"page":17},"Run and recover","\u002Foperations","5.operations",[86,90,94,98],{"title":87,"path":88,"stem":89},"Monitor Runs","\u002Foperations\u002Fmonitoring","5.operations\u002F1.monitoring",{"title":91,"path":92,"stem":93},"Approve prepared steps","\u002Foperations\u002Fapprovals","5.operations\u002F2.approvals",{"title":95,"path":96,"stem":97},"Recover or cancel execution","\u002Foperations\u002Frecovery","5.operations\u002F3.recovery",{"title":99,"path":100,"stem":101},"Troubleshooting","\u002Foperations\u002Ftroubleshooting","5.operations\u002F4.troubleshooting",{"title":103,"path":104,"stem":105,"children":106,"page":17},"Action catalog","\u002Fcatalog","6.catalog",[107],{"title":108,"path":109,"stem":110},"Find and use Actions","\u002Fcatalog\u002Foverview","6.catalog\u002F1.overview",{"title":112,"path":113,"stem":114,"children":115,"page":17},"Administration","\u002Fadministration","7.administration",[116,120,124,128],{"title":117,"path":118,"stem":119},"Registries and Environments","\u002Fadministration\u002Fenvironments","7.administration\u002F2.environments",{"title":121,"path":122,"stem":123},"Manage runners","\u002Fadministration\u002Frunners","7.administration\u002F3.runners",{"title":125,"path":126,"stem":127},"Access and approval policies","\u002Fadministration\u002Faccess","7.administration\u002F4.access",{"title":129,"path":130,"stem":131},"Backups and upgrades","\u002Fadministration\u002Fmaintenance","7.administration\u002F5.maintenance",{"title":133,"path":134,"stem":135,"children":136,"page":17},"Develop Actions","\u002Factions","8.actions",[137,141,145],{"title":138,"path":139,"stem":140},"Build your first Action","\u002Factions\u002Fquickstart","8.actions\u002F1.quickstart",{"title":142,"path":143,"stem":144},"Local development","\u002Factions\u002Flocal-development","8.actions\u002F2.local-development",{"title":146,"path":147,"stem":148},"Publish an Action","\u002Factions\u002Fpublishing","8.actions\u002F3.publishing",{"title":150,"path":151,"stem":152,"children":153,"page":17},"Reference","\u002Freference","9.reference",[154,158,162,166,170,174,178,182,186,190],{"title":155,"path":156,"stem":157},"Operator CLI","\u002Freference\u002Foperator-cli","9.reference\u002F1.operator-cli",{"title":159,"path":160,"stem":161},"Installer CLI","\u002Freference\u002Finstaller-cli","9.reference\u002F10.installer-cli",{"title":163,"path":164,"stem":165},"Definition syntax","\u002Freference\u002Fdefinition","9.reference\u002F2.definition",{"title":167,"path":168,"stem":169},"CLI configuration","\u002Freference\u002Fconfiguration","9.reference\u002F3.configuration",{"title":171,"path":172,"stem":173},"API integration","\u002Freference\u002Fapi","9.reference\u002F4.api",{"title":175,"path":176,"stem":177},"Action CLI","\u002Freference\u002Faction-cli","9.reference\u002F5.action-cli",{"title":179,"path":180,"stem":181},"Action SDK","\u002Freference\u002Fsdk","9.reference\u002F6.sdk",{"title":183,"path":184,"stem":185},"Contracts and compatibility","\u002Freference\u002Fcontracts","9.reference\u002F7.contracts",{"title":187,"path":188,"stem":189},"Server configuration","\u002Freference\u002Fserver-configuration","9.reference\u002F8.server-configuration",{"title":191,"path":192,"stem":193},"Runner configuration","\u002Freference\u002Frunner-configuration","9.reference\u002F9.runner-configuration",{"id":195,"title":78,"body":196,"description":434,"extension":435,"meta":436,"navigation":437,"path":79,"seo":438,"stem":80,"__hash__":439},"docs\u002F4.workflows\u002F2.inputs-and-secrets.md",{"type":197,"value":198,"toc":428},"minimark",[199,204,280,300,343,355,358,362,374,377,381,384,400,407,411,418,421,424],[200,201,203],"h2",{"id":202},"choose-the-right-source","Choose the right source",[205,206,207,223],"table",{},[208,209,210],"thead",{},[211,212,213,217,220],"tr",{},[214,215,216],"th",{},"Source",[214,218,219],{},"Use it for",[214,221,222],{},"Example binding",[224,225,226,241,254,267],"tbody",{},[211,227,228,232,235],{},[229,230,231],"td",{},"Run inputs",[229,233,234],{},"Values supplied for one execution",[229,236,237],{},[238,239,240],"code",{},"${{ inputs.service }}",[211,242,243,246,249],{},[229,244,245],{},"Environment context",[229,247,248],{},"Public settings shared by workflows",[229,250,251],{},[238,252,253],{},"${{ context.service_api }}",[211,255,256,259,262],{},[229,257,258],{},"Environment secrets",[229,260,261],{},"Credentials and other protected values",[229,263,264],{},[238,265,266],{},"${{ secrets.service_api_token }}",[211,268,269,272,275],{},[229,270,271],{},"Earlier outputs",[229,273,274],{},"Data returned by a completed step",[229,276,277],{},[238,278,279],{},"${{ steps.inspect.outputs.service_id }}",[281,282,283,284,287,288,291,292,295,296,299],"p",{},"Declare caller inputs with their types and, where appropriate, ",[238,285,286],{},"required",", ",[238,289,290],{},"default",", or ",[238,293,294],{},"enum",". Start a Run using ",[238,297,298],{},"--inputs"," with a JSON or YAML object:",[301,302,308],"pre",{"className":303,"code":304,"filename":305,"language":306,"meta":307,"style":307},"language-json shiki shiki-themes pyplines-light pyplines-light pyplines-dark","{\"service\": \"checkout-api\"}\n","inputs.json","json","",[238,309,310],{"__ignoreMap":307},[311,312,315,319,322,326,328,331,334,338,340],"span",{"class":313,"line":314},"line",1,[311,316,318],{"class":317},"sgMYo","{",[311,320,321],{"class":317},"\"",[311,323,325],{"class":324},"sNIIm","service",[311,327,321],{"class":317},[311,329,330],{"class":317},":",[311,332,333],{"class":317}," \"",[311,335,337],{"class":336},"sfDcV","checkout-api",[311,339,321],{"class":317},[311,341,342],{"class":317},"}\n",[301,344,349],{"className":345,"code":346,"filename":347,"language":348,"meta":307,"style":307},"language-sh shiki shiki-themes pyplines-light pyplines-light pyplines-dark","pyplines run start development\u002Fservice-health --inputs .\u002Finputs.json\n","Terminal","sh",[238,350,351],{"__ignoreMap":307},[311,352,353],{"class":313,"line":314},[311,354,346],{},[281,356,357],{},"Input files contain ordinary parameters. Supply credentials through Environment secrets instead.",[200,359,361],{"id":360},"public-configuration","Public configuration",[281,363,364,365,368,369,373],{},"An administrator sets context on the Environment, for example ",[238,366,367],{},"service_api: https:\u002F\u002Fservices.example.com",". The same Definition can then be deployed to multiple Environments without embedding different endpoints in its source. See ",[370,371,372],"a",{"href":118},"Environment configuration",".",[281,375,376],{},"Context is resolved at step preparation time. Updating context does not edit a Definition or a Run's pinned Action image, but it can change prepared inputs and invalidate approval evidence.",[200,378,380],{"id":379},"manage-secrets","Manage secrets",[281,382,383],{},"Administrators can set a secret interactively without putting its value in shell history:",[301,385,387],{"className":345,"code":386,"filename":347,"language":348,"meta":307,"style":307},"pyplines secret set development service_api_token\npyplines secret list development\n",[238,388,389,394],{"__ignoreMap":307},[311,390,391],{"class":313,"line":314},[311,392,393],{},"pyplines secret set development service_api_token\n",[311,395,397],{"class":313,"line":396},2,[311,398,399],{},"pyplines secret list development\n",[281,401,402,403,406],{},"The secret name in a Definition must exactly match its stored name. For automation, ",[238,404,405],{},"secret set ENVIRONMENT NAME --stdin"," reads from standard input. Supply the value from your existing secret delivery system. Each update uses the current secret version; concurrent updates can conflict.",[200,408,410],{"id":409},"secret-bindings-and-private-steps","Secret bindings and private steps",[281,412,413,414,417],{},"A secret reference must occupy an entire Action input value. Do not interpolate a secret into a larger string, put it in ",[238,415,416],{},"when",", or store it as an ordinary Run parameter or YAML literal.",[281,419,420],{},"Sensitive input\u002Foutput schemas and secret-tainted output bindings make a receiving step private. Private results are withheld from ordinary read APIs and private logs are suppressed entirely. An absent private log is therefore not evidence that the Action never executed. Inspect its attempt and status instead.",[281,422,423],{},"Secret rotation can invalidate prepared approvals. A newly prepared step uses the current secret version; it does not rewrite the evidence retained for prior attempts.",[425,426,427],"style",{},"html pre.shiki code .sgMYo, html code.shiki .sgMYo{--shiki-light:#54657A;--shiki-default:#54657A;--shiki-dark:#A9B8CA}html pre.shiki code .sNIIm, html code.shiki .sNIIm{--shiki-light:#326C9A;--shiki-default:#326C9A;--shiki-dark:#A7CDEB}html pre.shiki code .sfDcV, html code.shiki .sfDcV{--shiki-light:#34694B;--shiki-default:#34694B;--shiki-dark:#9BC9AD}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"title":307,"searchDepth":396,"depth":396,"links":429},[430,431,432,433],{"id":202,"depth":396,"text":203},{"id":360,"depth":396,"text":361},{"id":379,"depth":396,"text":380},{"id":409,"depth":396,"text":410},"Bind operational parameters and environment-specific values without embedding credentials in YAML.","md",{},true,{"title":78,"description":434},"TqLitVKmFLTi__UIQZiVOXEsW9nKlvqvstiqYWbgVUc",[441,443],{"title":74,"path":75,"stem":76,"description":442,"children":-1},"Manage installed Definitions, revisions, and Run inputs.",{"title":87,"path":88,"stem":89,"description":444,"children":-1},"Follow execution and inspect the evidence for each step and attempt.",1792213697377]