Represents a CI/CD variable defined at the group scope. Group variables are injected into pipeline jobs for all projects within the group and its subgroups (subject to protection and environment scope settings). They are commonly used for group-wide deployment credentials, container registry tokens, or shared API keys.
If the variable's value is a valid GitLab personal access token (verified via API), a GL_IsToken edge is added to the corresponding GL_AccessToken node.
| Property Name | Data Type | Description |
|---|---|---|
| name | string | Variable key name |
| value | string | Variable value (empty if hidden) |
| type | string | Variable type: env_var or file |
| protected | bool | Whether the variable is only injected into protected branch/tag pipelines |
| masked | bool | Whether the variable value is masked in job logs |
| hidden | bool | Whether the variable value is hidden (not retrievable via API) |
| environment_scope | string | Environment scope filter (e.g., *, production) |
| description | string | Optional description |
flowchart TD
GL_AccessToken[fa:fa-key GL_AccessToken]
GL_Group[fa:fa-user-group GL_Group]
GL_GroupVariable[fa:fa-sliders GL_GroupVariable]
GL_Group -->|GL_Defines| GL_GroupVariable
GL_GroupVariable -->|GL_IsToken| GL_AccessToken