Back to Integrations
Azure Key Vault
Reference Azure Key Vault secrets in env zero so values are resolved at deploy time. Requires a self-hosted agent.
Integration
category
Secret Management
Overview
env zero can pull secrets from Azure Key Vault during deployment instead of storing them itself. Reference a secret with a simple placeholder and env zero resolves it at runtime, so sensitive values stay in Key Vault rather than on the platform.
How it works
With a self-hosted runner that can reach your Key Vault, reference secrets using a placeholder in your variables. env zero resolves each one only while a deployment runs, so values never live in env zero's storage.