Overview

Environment variables

This reference lists environment variables that you can set directly, that Depot tools read, or that Depot runtime environments provide to your jobs.

It does not include Depot service-internal variables or CI provider runtime variables that Depot tools consume automatically.

Authentication and identity

VariableProductsDescription
DEPOT_TOKENCLI, Container Builds, Depot CI, Depot Cache, Depot Registry, Remote Agents, API/SDKDepot auth token. The CLI reads this after explicit --token flags and before locally stored login credentials. In Depot CI, Depot injects a short-lived job token automatically.
DEPOT_CACHE_TOKENDepot Cache, Depot CI, GitHub Actions runnersShort-lived Depot Cache auth token. In Depot CI jobs and Depot GitHub Actions runner jobs, Depot injects it automatically. The CLI can also read it as a fallback auth token.
DEPOT_ORG_IDDepot Cache, Depot CI, GitHub Actions runners, Remote AgentsDepot organization ID. Cache integrations use it as organization context; Depot CI and GitHub Actions runners set it for jobs automatically.

Project and build selection

VariableProductsDescription
DEPOT_PROJECT_IDCLI, Container Builds, API/SDKDepot project ID. Used by depot build, depot bake, build API examples, and other project-scoped commands when a --project flag or depot.json file is not used.
DEPOT_BUILD_IDCLI, Container Builds, API/SDKExisting build ID created by the Depot API. When set, depot build attaches to that build instead of creating a new one.
DEPOT_BUILD_PLATFORMCLI, Container BuildsDefault build machine platform for commands that support platform selection. Supported values are dynamic, linux/amd64, and linux/arm64.

CLI behavior

VariableProductsDescription
DEPOT_DISABLE_OTELCLI, Container BuildsDisables Depot CLI OpenTelemetry tracing.
DEPOT_NO_SUMMARY_LINKCLI, Container BuildsSuppresses Depot build summary links and update notices in CLI output.
DEPOT_NO_UPDATE_NOTIFIERCLIDisables Depot CLI update notifications.
DEPOT_ERROR_TELEMETRYCLISet to 0 to disable Depot CLI error telemetry.
DEPOT_DEBUGCLIEnables Depot CLI debug logging.
DEPOT_DEBUG_OIDCCLIPrints OIDC provider lookup details while the CLI attempts to authenticate through CI OIDC.
DEPOT_INSTALL_DIRCLI installerDirectory where the shell installer places the depot binary. Defaults to $HOME/.depot/bin.
DEPOT_BINARY_PATHnpm packageOverrides the binary path used by the @depot/cli npm package.

Container registry credentials

VariableProductsDescription
DEPOT_PUSH_REGISTRY_USERNAMECLI, Container Builds, Depot RegistryUsername used by depot push when pushing from the Depot Registry to another registry without relying on local Docker credentials.
DEPOT_PUSH_REGISTRY_PASSWORDCLI, Container Builds, Depot RegistryPassword used with DEPOT_PUSH_REGISTRY_USERNAME.
DEPOT_PUSH_REGISTRY_AUTHCLI, Container Builds, Depot RegistryBase64-encoded username:password auth string used by depot push as an alternative to separate username and password variables.

Depot Cache

These variables are useful when configuring build tools to use Depot Cache. Some are set by users for specific tools, and others are injected automatically in Depot CI jobs and Depot GitHub Actions runner jobs.

VariableProductsDescription
GOCACHEPROGDepot Cache, Depot CI, GitHub Actions runnersGo cache program hook. Set it to depot gocache to use Depot Cache for Go builds.
SCCACHE_WEBDAV_ENDPOINTDepot Cache, Depot CI, GitHub Actions runnersWebDAV endpoint used by sccache to read and write cache entries in Depot Cache.
SCCACHE_WEBDAV_TOKENDepot Cache, Depot CI, GitHub Actions runnersBearer-style token used by sccache with SCCACHE_WEBDAV_ENDPOINT.
SCCACHE_WEBDAV_USERNAMEDepot CacheUsername-style sccache auth value. Use the Depot organization ID when configuring this manually.
SCCACHE_WEBDAV_PASSWORDDepot CachePassword-style sccache auth value. Use a Depot user or organization token when configuring this manually.
TURBO_APIDepot Cache, Depot CI, GitHub Actions runnersTurborepo remote cache endpoint.
TURBO_TEAMDepot Cache, Depot CI, GitHub Actions runnersTurborepo team value. In Depot CI jobs and Depot GitHub Actions runner jobs, this is set to the Depot organization ID.
TURBO_TEAMIDDepot Cache, Depot CI, GitHub Actions runnersTurborepo team ID alias. In Depot CI jobs and Depot GitHub Actions runner jobs, this is set to the Depot organization ID.
TURBO_TOKENDepot Cache, Depot CI, GitHub Actions runnersTurborepo remote cache auth token.

Depot CI

Depot CI jobs provide CI-specific variables, plus the authentication and identity variables listed in Authentication and identity.

VariableDescription
DEPOT_JOB_URLDirect link to the current Depot CI job attempt in the Depot dashboard.
GITHUB_ENVIRONMENTWorkflow-derived environment name. Set when the job uses a static environment: value, such as environment: production.

Depot CI also supports GitHub Actions-compatible runtime variables and environment-file variables such as GITHUB_ENV, GITHUB_OUTPUT, GITHUB_PATH, GITHUB_STATE, and GITHUB_STEP_SUMMARY so existing GitHub Actions workflows and actions can pass environment variables, outputs, paths, state, and job summaries between steps.

For full GitHub Actions compatibility details in Depot CI, see Compatibility.