Variables

• Values encrypted at rest
• Masked in API responses
• Reveal is audit-logged
• Build args (isBuildArg) passed into the build
• Runtime vars injected into the container

Bulk import: paste KEY=VALUE lines in Environment UI.