# Depot CI: add variants for secrets and variables (https://depot.dev/changelog/2026-05-11-ci-secrets-variables-variants) > Published 2026-05-11 You can now add secret and variable variants in Depot CI and limit their availability by environment, repository, branch, and workflow file from the dashboard. * **Attributes** let you limit when a secret or variable is injected by repository, branch name, workflow file, or environment name. Branch and workflow attributes support glob patterns like `release/*` or `deploy-*.yaml`. Attributes combine: multiple attribute types narrow availability, while multiple attributes of the same type broaden availability. * **Variants** let you create multiple versions of the same secret or variable name that resolve to different values depending on the workflow context. For example, you can have one `DATABASE_URL` secret for all repositories, a different value scoped to a specific repository, and another selected only when the job runs in a `production` environment. Depot picks the most specific matching variant before the job starts. Workflow secrets dashboard listing secrets with their variants and availability tags scoped to environment, repository, branch, and workflow file The dashboard includes filters to check which variant resolves for a job before running it, so you can validate complex secret configurations. For full details, see [Manage secrets and variables](/docs/ci/how-to-guides/manage-secrets-and-variables). ## For AI Agents The full site index is at [llms.txt](https://depot.dev/llms.txt). Append `.md` to any documentation, blog, changelog, or customer URL to fetch its markdown source directly.