Managing Your Secrets

By: Michael R. Bagnall

Last Updated: July 3, 2026

We’re delighted to announce the availability of managed secrets, a new capability that lets teams define API keys, tokens, passwords and other sensitive configuration directly in the Probo portal and use them in every build as environment variables.

Until now, getting credentials into a build environment typically meant uploading them as build assets - a credentials file placed alongside your database dumps - or, worse, committing them to the repository itself. Managed secrets remove that step entirely. Values are entered once in the portal at app.probo.ci, stored outside your codebase, masked in the interface, and delivered to your build containers automatically on the next build.

Credential files uploaded as assets worked, but they were one more artifact to create, one more thing to keep current, and one more place a password could leak. With managed secrets, you set a value once and every build that needs it simply has it. Nothing sensitive ever touches your repository or your asset uploads.

Two Scopes, One Simple Rule

Secrets can be defined at the Organization level, where they are shared by every project the organization owns, or on an individual Project, where they apply to that project alone. When the same key exists at both levels, the project value wins - making it easy to share a default across dozens of projects while overriding it for the one that needs something different.

Available in Every Build

Each secret becomes an environment variable inside the build container, usable anywhere the built-in variables are:

steps:
  - name: Deploy Theme Assets
    plugin: Script
    script: |
      curl -H "Authorization: Bearer $MY_API_TOKEN" https://api.example.com/assets

Applications can read the same values at runtime - getenv('MY_API_TOKEN') in PHP, or standard environment variable access in .NET, Node.js, Ruby and Python. Values are masked in the portal once saved, revealed only by an explicit click of the eye icon, and removable with a single click when it is time to rotate them.

Managed secrets are available now to all Probo.CI accounts at no additional cost. Full documentation, including step-by-step setup for organizations and projects, is available in our Environment Variables & Secrets documentation.

Related Articles & Information

---

Environment Variables & Secrets Environment Setup Managing Probo Build Assets