Processing environment variables in SourceCraft

The SourceCraft CI/CD processes support environment variables. The following variable scopes are available:

  • Global: To provide the variables to all cubes of all tasks in all workflows.
  • Workflow: To provide the variables to all cubes of all tasks of a specific workflow.
  • Task: To provide the variables to all cubes linked to the task.
  • Cube: To provide the variables to the specified cube.

You can reuse variables in nested scopes.

Also, you can use predefined environment variables.

Warning

Do not store any sensitive data, such as passwords, access keys, or tokens, in environment variables; use secrets instead.

To use environment variables in CI/CD processes:

  1. Configure CI/CD in your repository.

  2. In the .sourcecraft/ci.yaml configuration file, add the environment variables to the tasks or cubes section. Here is an example:

    # Defining global variables
    # to provide to all cubes of all tasks in all workflows.
    env:
      GLOBAL_VAR: global_var
      GLOBAL_SECRET: ${{ secrets.<secret_name> }}
    
    workflows:
      my-workflow:
        # Here you define variables that will be available in all cubes 
        # of all my-workflow tasks
        env:
          WORKFLOW_VAR: workflow-var
        
        tasks:
          - name: my-task
            # Here you define variables that will be available in all cubes 
            # within my-task
            env:
              TASK_ENV_VAR: This variable is available in all cubes of this task.
              # Multi-line variable
              MULTILINE_VAR: |
                multi-var
                multi-var
                this is my multi-var
            
            cubes:
              - name: my-cube-1
                # Here you define variables that will only be available
                # within my-cube-1
                env:
                  CUBE_ENV_VAR: This variable is available only in cube my-cube-1.
                  # Variable with a value from a secret
                  SECRET_VAR: ${{ secrets.<secret_name> }}
                  # Reusing global variables, 
                  # e.g., GLOBAL_VAR and GLOBAL_SECRET
                  LOCAL_VAR: ${{ env.<global_variable_1> }}
                  LOCAL_SECRET: ${{ env.<global_variable_2> }}
                  # Reusing workflow variables,
                  # e.g., WORKFLOW_VAR
                  LOCAL_VAR2: ${{ env.<workflow_variable> }}
    
                script:
                  - echo "$TASK_ENV_VAR"
                  - echo "$MULTILINE_VAR"
                  - echo "$CUBE_ENV_VAR"
                  - echo "$SECRET_VAR"
                  - echo "$WORKFLOW_VAR"
                  - echo "$LOCAL_VAR"
                  - echo "$LOCAL_VAR2"
                  - echo "$LOCAL_SECRET"
    
              - name: my-cube-2
                # Here you define variables that will only be available 
                # within my-cube-2
                env:
                  CUBE_ENV_VAR: This variable is available only in cube my-cube-2.
                script:
                  - echo "$TASK_ENV_VAR"
                  - echo "$CUBE_ENV_VAR"
                  # Using a predefined variable
                  - echo "$SOURCECRAFT_TASK"
                  - echo "$WORKFLOW_VAR"
                  - echo "$GLOBAL_VAR"
    
          - name: my-task-2
            cubes:
              - name: my-cube-3
                script:
                  - echo "$WORKFLOW_VAR"
                  - echo "$GLOBAL_VAR"
    
  3. Push changes to a remote repository.

  4. Check the CI/CD process.

See also