gh-variable

List variables for the current repository

$ gh variable [[ls|list]]

$ gh variable [[ls|list]] [[-o|--org]] [organization]

$ gh variable get [name]

$ gh variable set [name]

$ gh variable set [name] [[-e|--env]] [environment_name]

$ gh variable set [name] [[-o|--org]] [organization] [[-v|--visibility]] all

$ gh variable set [[-f|--env-file]] [path/to/file.env]

$ gh variable delete [name]

gh variable <list|set|delete> [NAME] [VALUE] [<flags>]

--env <string>
    Target environment name (production, staging, development)

--org <string>
    Operate on organization variables

--repo [<OWNER/>]<NAME>
    Operate on specific repository

--limit <int>
    Maximum variables to list (default 30, for list)

--show-vals
    Display variable values (for list)

--json [<fields>]
    Output as JSON (for list)

--body-path <file>
    Read variable value from file (for set)

gh variable is a subcommand of the GitHub CLI (gh) for managing environment variables in GitHub repositories, organizations, and environments. It enables listing, creating, updating, and deleting variables used in GitHub Actions workflows via command line, avoiding the web UI.

Variables store non-sensitive data like API keys or config values, visible to repository collaborators (unlike encrypted secrets). Target specific contexts with --repo, --org, or --env (e.g., production, staging). List variables with optional JSON output or value display; set from direct input, stdin, or files; delete precisely.

Ideal for CI/CD automation, scripting deployments, and team workflows. Requires authentication via gh auth login. Supports pagination for large sets.

Requires GitHub CLI installed and user authenticated. Variables are unencrypted and visible to repo/org collaborators. No bulk operations; use scripts for multiples. Environment support limited to named ones.

Set variable: gh variable set MY_API_KEY "value" --repo owner/repo --env production
List: gh variable list --repo owner/repo --show-vals
Delete: gh variable delete MY_VAR --org myorg

For set, omit VALUE to read from stdin: echo "secret" | gh variable set KEY --body-path - or use file with --body-path file.txt.

Part of GitHub CLI v1.0.0 (Dec 2020). Environment targeting added in v2.0+ (2022). JSON output and limits improved in recent updates for better scripting.

gh(1), gh-secret(1), git(1)