nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

How to view the values of secured Repository variables?

Rishabh Srivastava_icy173

Below is the path of the variable that I'm trying to view:

Repository settings (on left vertical menu) -> Pipelines (submenu) -> Repository variables

Here it contains few secured variables whose values we are trying to fetch, any suggestions/help is appreciated.

Accepted answers

Benjamin Pellaers

Hey Rishabh,

Unfortunately - you cannot view these values once they have been set - and these are obscured from the build log if you try to echo these. This is by design as secure variables are stored as encrypted values. If you want to edit a secure variable, you can only give it a new value or delete it.

More information regarding this can be found here:
https://support.atlassian.com/bitbucket-cloud/docs/variables-and-secrets/

Cheers!

- Ben (Bitbucket Cloud Support)

All comments

Benjamin Pellaers

Hey Rishabh,

More information regarding this can be found here:
https://support.atlassian.com/bitbucket-cloud/docs/variables-and-secrets/

Cheers!

- Ben (Bitbucket Cloud Support)

Rishabh Srivastava_icy173

Thanks Ben!

남성식_ut81iy

I tried below and it worked.

- step:

script:

- echo $VAR >> var.txt

artifacts:

- var.txt

You can see the value on var.txt file.

I‘m curious that secure variables are really secure. It could be exported to a file and this file could be downloaded!

Benjamin Pellaers

Hey ,

I've just tested on my end with a secured variable - the value of the variable is not actually printed, it prints the variable name without the value - do you see the same output?

 - step:

   script:

   - echo $testvar >> var.txt

   - cat var.txt

남성식_ut81iy

Oh, you cannot see the value with 'cat', because the bitbucket automatically erase every string, which is same with secured variable.

So you should save it as a artifacts and download it to see the value.

Benjamin Pellaers

Hey 남성식,

You're right actually, I've just tested this on my end.

I've raised a bug ticket - thank you for that, that's a great find:
https://jira.atlassian.com/browse/BCLOUD-22556

Cheers!

- Ben (Bitbucket Cloud Support)

Marcin Kielar_a4pqpr

script:
  - echo "$MY_VERY_SECRET_VARIABLE" | base64

What I find annoying is that there's no way to access these values via REST API, and that their values are invisible for Dynamic Pipelines.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

cloud

bitbucket

bitbucket-cloud