Skip to main content
​
string
default:"the name"
Shown on the run page and the target page.
​
string (Markdown)
Shown under the value.
​
boolean
default:"false"
Store encrypted and render masked behind a reveal control. Required when the output shares a secret variable’s name.
Names follow variable naming rules ([A-Z][A-Z0-9_]*, not starting with KEEL_) and are unique.

​
Capture semantics

  • Outputs are read from the container’s environment after the last step succeeds. Any variable present in the environment then is eligible — exported in any step, or an input variable passed through.
  • Exports carry across steps, so a value can be set early and refined later; the final value is captured.
  • A declared output absent from the environment shows as not set.
  • Failed and canceled runs capture nothing.
  • Values are captured on a dedicated channel and never appear in the visible log.

​
Secret handling

  1. secret: true outputs are stored encrypted and rendered masked.
  2. A non-secret output whose value contains any secret input’s value is treated as secret.
  3. An output named like a secret variable must declare secret: true; validation rejects the configuration otherwise.
  4. keel deploy prints secret outputs as •••; in Keel Cloud only members with the deploy or configure scope receive secret values.

​
Limits

​
Where values appear

Values are kept per run; older runs keep theirs.