List Depot CI secret names and scoping
depot_list_ci_secretsDiagnose missing CI secrets by listing their names and scopes. Compare against a failing job's scope to see why no variant matches, without exposing secret values.
Instructions
List the names and scoping of Depot CI secrets. Values are never returned — Depot's API does not expose them at all, by design.
Use this to answer "why can't my job see $FOO". Depot models a secret as one name with several variants, each scoped by repository, environment, branch, and workflow attributes; a job that cannot see a secret usually means no variant matches that job's scope. Compare what this returns against the job you are debugging.
Filtering happens in this server, because Depot's v3beta2 list filters are undocumented. Note that depot.ci.v3beta2 is a beta API and the most likely of Depot's surfaces to change.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| query | No | Case-insensitive substring match on the name. | |
| branch | No | Keep variants scoped to this branch. | |
| workflow | No | Keep variants scoped to this workflow. | |
| repository | No | Keep variants scoped to this repository, plus unscoped ones. | |
| environment | No | Keep variants scoped to this environment. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| secrets | Yes | ||
| returned | Yes | ||
| valuesAvailable | Yes | Always false: Depot never returns secret values over the API. |