Agent skill · software engineering · thebushidocollective
gitlab-ci-variables-secrets
Use when configuring GitLab CI/CD variables, managing secrets, or integrating with external secret providers. Covers secure credential handling.
Why this skill is useful
Provides specific patterns for managing secrets and variables in GitLab CI/CD that the AI wouldn't reliably generate on its own.
What it needs
About 1k tokens when loaded. Last updated 2026-07-19. 187 stars on the source repository.
What this skill does
GitLab CI - Variables & Secrets Configure CI/CD variables and manage secrets securely in GitLab pipelines. Variable Types Predefined Variables Custom Variables Variable Scopes Global Variables Job-Level Variables Environment-Scoped Variables Configure in GitLab UI: Settings > CI/CD > Variables Scope to specific environments (production, staging) Scope to specific branches (main, develop) Protected and Masked Variables In gitlab-ci.yml In GitLab UI Set variables with: Protected: Only available on protected branches/tags Masked: Hidden in job logs (requires specific format) Expanded: Allow variable references within value File-Type Variables External Secret Providers HashiCorp Vault Azure Key Vault AWS Secrets Manager OIDC Authentication Best Practices 1. Never hardcode secrets in .gitlab-ci.yml 2. Use protected variables for production credentials 3. Mask sensitive values to prevent log exposure 4. Prefer OIDC over long-lived credentials 5. Scope variables to minimum required environments 6. Use file-type variables for certificates and keys
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills thebushidocollective/variables-secrets