Learn · covers 3. Secrets and agent security

🔐 Secrets and agent security

A CI system is, structurally, a machine that runs arbitrary code with access to your production credentials. Most of the security work in Buildkite is about narrowing both halves of that sentence.

This module covers where secrets should live, how a job gets one without the pipeline knowing it, and how to stop an agent loading code you have not approved.

Counts toward Buildkite Platform Engineer (required) . You can also complete it on its own.

Units