Secret

ELI5 — The Vibe Check

A secret is an environment variable that's extra sensitive — API keys, passwords, tokens. The rule is simple: secrets NEVER go in your code or git history. They live in a secrets manager or your CI platform's encrypted vault, and your pipeline injects them at runtime like a classified document passed through secure channels.

Real Talk

Secrets are sensitive configuration values (API keys, database passwords, private certificates) that must be stored and transmitted securely. Modern platforms provide encrypted secret stores (GitHub Secrets, AWS Secrets Manager, HashiCorp Vault) that inject values at runtime without exposing them in logs or code.

Show Me The Code

# GitHub Actions - use stored secret
env:
  DATABASE_URL: ${{ secrets.DATABASE_URL }}
  API_KEY: ${{ secrets.API_KEY }}

When You'll Hear This

"Add that token as a secret in the CI settings." / "Never log secrets — they'll end up in your monitoring dashboard."