Back to Integrations

Azure Key Vault

Reference Azure Key Vault secrets in env zero so values are resolved at deploy time. Requires a self-hosted agent.

Integration
category

Secret Management

Overview

env zero can pull secrets from Azure Key Vault during deployment instead of storing them itself. Reference a secret with a simple placeholder and env zero resolves it at runtime, so sensitive values stay in Key Vault rather than on the platform.

How it works

With a self-hosted runner that can reach your Key Vault, reference secrets using a placeholder in your variables. env zero resolves each one only while a deployment runs, so values never live in env zero's storage.