Back to Integrations

GCP Secret Manager

Reference GCP Secret Manager secrets in env zero so values are resolved at deploy time. Requires a self-hosted runner.

Integration
category

Secret Management

Overview

env zero can pull secrets from Google Cloud Secret Manager during deployment instead of storing them itself. Reference a secret with a simple placeholder and env zero resolves it at runtime, keeping sensitive values in GCP, not on the platform.

How it works

With a self-hosted runner that has access to Secret Manager, reference secrets using a placeholder in your variables. env zero resolves each one only while a deployment runs, so values never live in env zero's storage.