griffin apply — they’re not resolved at execution time.
Using variables
griffin apply production, the CLI resolves variable("API_HOST") using the value set for the production environment.
Template interpolation
Use a template string to embed a variable within a larger value:${key} matching the variable key.
Managing variables with the CLI
Variables vs secrets
| Variables | Secrets | |
|---|---|---|
| Resolved | At deploy time (griffin apply) | At execution time (by the executor) |
| Stored in monitor | Yes — the resolved value is baked in | No — only a reference is stored |
| Visible in hub | Yes | No — values never leave the secret provider |
| Use for | Base URLs, paths, non-sensitive config | API keys, tokens, passwords |