Secrets & saved credentials
Supply the settings applications and automation need without putting credentials in public source. Keep access under platform permissions.
Open the guideHow it works
Configure variables for the intended projects and services. Saved credentials cover supported Git, registry, server, and storage connections, with encrypted storage for sensitive values.
Independent Actions uses configured workflow secrets and variables; GitHub-coordinated workflows use GitHub settings. Changed application variables may need a redeploy before the running process receives them.
What you can do
Application configuration
Set values for the intended project or service.
Encrypted credentials
Save supported infrastructure connection credentials.
Workflow scope
Configure secrets in the controller owning the workflow.
Explore more
Ship it your way.
Self-hosted and free, or managed on Openship Cloud — the same workflow either way.