SecretBinding

Runtime secret injection request. ref identifies a stored secret and name selects its key under contexts["secrets"]; the execution principal must have use permission.

nameName (string)required

contexts['secrets'] key the step reads

refRef (string)required

Secret reference, e.g. secret://secret./token

SecretBinding

{
  "name": "string",
  "ref": "string"
}