Back to Integrations
GCP Secret Manager
Reference GCP Secret Manager secrets in env zero so values are resolved at deploy time. Requires a self-hosted runner.
Integration
category
Secret Management
Overview
env zero can pull secrets from Google Cloud Secret Manager during deployment instead of storing them itself. Reference a secret with a simple placeholder and env zero resolves it at runtime, keeping sensitive values in GCP, not on the platform.
How it works
With a self-hosted runner that has access to Secret Manager, reference secrets using a placeholder in your variables. env zero resolves each one only while a deployment runs, so values never live in env zero's storage.