{
  "slug": "bk-secret-adds-secret-management-commands-28e66abe6055",
  "title": "bk secret adds secret management commands",
  "tools": [
    "bk"
  ],
  "tags": [
    "agent"
  ],
  "introduced_at": "2026-02-11T00:54:26.000Z",
  "announced_at": "2026-02-11T00:54:26.000Z",
  "effective_at": null,
  "date_basis": "source-publication",
  "status": "unknown",
  "how": {
    "incantation": "When managing Buildkite secrets, use `bk secret` with the cluster ID and the relevant `create`, `update`, `delete`, `list`, or `get` subcommand. For example, create with `--cluster-id`, `--key`, and `--value`; the value can be entered interactively when omitted.",
    "examples": [
      "bk secret create --cluster-id <cluster-id> --key <key> --value \"<secret-value>\"",
      "bk secret update --cluster-id <cluster-id> --secret-id <secret-id> --description \"<description>\"",
      "bk secret list --cluster-id <cluster-id>"
    ],
    "gotchas": [
      "Version: v3.24.0",
      "--cluster-id <cluster-id> (required): Cluster ID; the v3.24.0 create command requires it.",
      "--key <key> (required): Secret key name, such as MY_SECRET.",
      "--value <value>: Secret value. If omitted, the CLI prompts interactively; with `--no-input`, it is required.",
      "--description <description>: Description of the secret; on update, changes the description.",
      "--policy <policy>: Secret access policy in YAML format.",
      "--secret-id <secret-id> (required): Secret ID used by get, update, and delete.",
      "--update-value: Prompt to update the secret value.",
      "--output, -o <format>: Output format: json, yaml, or text.",
      "--cluster-uuid <uuid>: Current online reference uses this cluster selector; it differs from the v3.24.0 source's `--cluster-id`.",
      "Docs conflict: The current Buildkite CLI reference uses `--cluster-uuid`; v3.24.0 source uses `--cluster-id`. Use `--cluster-id` for the card's stated version."
    ]
  },
  "why_it_matters": "Manage secrets while maintaining a Buildkite pipeline.",
  "sources": [
    "https://github.com/buildkite/cli/releases/tag/v3.24.0",
    "https://github.com/buildkite/cli/pull/638",
    "https://github.com/buildkite/cli/blob/v3.24.0/cmd/secret/create.go",
    "https://github.com/buildkite/cli/tree/v3.24.0/cmd/secret",
    "https://buildkite.com/docs/platform/cli/reference/secret"
  ],
  "rank": 0.96034,
  "judge": {
    "publish": true,
    "judge_model": "codex-cli/gpt-6-luna+typesafe/jev-1.13.0",
    "prompt_version": "extract-v7+enrich-v2+judge-v2x3+jev-publish-v1"
  },
  "review_state": "approved",
  "provenance": {
    "run_id": "wave2b-20261017",
    "verdict_id": "wave2b-20261017:wave2b-20261017-0401be93a5046fa4-1:gate",
    "evidence_hash": "87d890a7b4ac96c8287f6d5ed89478141d259624475adbe13444e9418cf6b597"
  },
  "review": {
    "draft_hash": "8b02e1806a03311cdb3c1b7ebdfe1080d911ccc6ef33183903b964bfeb9fbd70",
    "reviewer": "publication-gate",
    "reviewed_at": "2026-10-07T00:00:00.000Z",
    "decision": "wave2b-20261017:gate",
    "reason": "3 of 3 judge runs approved with p_yes >= 0.9 (mean 0.96 >= 0.9; 2 needed) and Jev gave 0.78 (>= 0.6 needed)."
  }
}