Skip to content

GitLab CI

Store QUOLLVAULT_TOKEN as a masked/protected CI variable and upload after the build job creates the artifact.

yaml
upload_quollvault:
  script:
    - quollvault config set api https://api.quollvault.com
    - quollvault config set app "$QUOLLVAULT_APP_ID"
    - quollvault config set environment "$QUOLLVAULT_ENVIRONMENT_ID"
    - quollvault upload ./build/app.apk

QuollVault detects GitLab CI provenance from standard CI variables. Do not echo the token or place it in command arguments.

Common failures

Ensure the upload job receives the build artifact, masked variables are available on the branch, and the Automation Token scope covers the selected App.