triggerdotdev--trigger.dev/.changeset/sync-env-vars-is-secret.md

@trigger.dev/build

@trigger.dev/build
patch

You can now mark environment variables synced via the syncEnvVars build extension as secrets. Return { name, value, isSecret: true } from your callback and those variables are stored redacted in the dashboard, just like manually created secret env vars.