From 3b55fbd64d365575739ea4a96c4fdfda9bbc5998 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Marek=20Trunk=C3=A1t?= Date: Thu, 9 Apr 2026 16:12:40 +0200 Subject: [PATCH 1/3] feat: Making clearer that env vars are shared along with source code --- .../programming_interface/environment_variables.md | 8 ++++++++ sources/platform/actors/publishing/publish.mdx | 6 ++++++ 2 files changed, 14 insertions(+) diff --git a/sources/platform/actors/development/programming_interface/environment_variables.md b/sources/platform/actors/development/programming_interface/environment_variables.md index 1936602b69..8cb27bfda0 100644 --- a/sources/platform/actors/development/programming_interface/environment_variables.md +++ b/sources/platform/actors/development/programming_interface/environment_variables.md @@ -118,6 +118,14 @@ Actor owners can define custom environment variables to pass additional configur For sensitive data like API keys or passwords, enable the **Secret** option. This will encrypt the value and redact it from logs to prevent accidental exposure. +:::caution Visibility of environment variables in public Actors + +When you [publish your Actor](/platform/actors/publishing/publish), non-secret environment variables are visible to anyone on the Actor detail page along with the source code. If you enable **Hide source files from Actor detail** in the Actor's **Settings**, non-secret environment variables are hidden as well. + +Secret environment variables are never exposed on the Actor detail page regardless of this setting. Always mark sensitive values as **Secret**. + +::: + :::info Build-time variables Once you start a build, you cannot change its environment variables. To use different variables, you must create a new build. diff --git a/sources/platform/actors/publishing/publish.mdx b/sources/platform/actors/publishing/publish.mdx index c7697b985f..2f3cd22c47 100644 --- a/sources/platform/actors/publishing/publish.mdx +++ b/sources/platform/actors/publishing/publish.mdx @@ -56,3 +56,9 @@ To save time when writing your Actor's README, you can use the following templat https://github.com/zpelechova/readme-template Note that the complexity of your README should match the complexity of your Actor. Feel free to adapt the template to fit your Actor's specific requirements. + +## Source code visibility + +When you publish an Actor, its source code files and non-secret [environment variables](/platform/actors/development/programming-interface/environment-variables) are **publicly visible** by default on the Actor detail page. + +To hide them, go to your Actor's **Settings** tab in Apify Console and check **Hide source files from Actor detail**. Secret environment variables are never exposed regardless of this setting. From d2f025bcb6e3c6d7dc7ec86296cbcfadb5951eb1 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Marek=20Trunk=C3=A1t?= Date: Thu, 9 Apr 2026 21:17:14 +0200 Subject: [PATCH 2/3] Update sources/platform/actors/publishing/publish.mdx Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> --- sources/platform/actors/publishing/publish.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sources/platform/actors/publishing/publish.mdx b/sources/platform/actors/publishing/publish.mdx index 2f3cd22c47..f3e2d3c109 100644 --- a/sources/platform/actors/publishing/publish.mdx +++ b/sources/platform/actors/publishing/publish.mdx @@ -59,6 +59,6 @@ Note that the complexity of your README should match the complexity of your Acto ## Source code visibility -When you publish an Actor, its source code files and non-secret [environment variables](/platform/actors/development/programming-interface/environment-variables) are **publicly visible** by default on the Actor detail page. +When you publish an Actor, its source code files and non-secret [environment variables](/platform/actors/development/programming-interface/environment-variables) are publicly visible by default on the Actor detail page. To hide them, go to your Actor's **Settings** tab in Apify Console and check **Hide source files from Actor detail**. Secret environment variables are never exposed regardless of this setting. From eb26d8b18f3e05765b8e3ab2bbffcafd151f18d2 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Marek=20Trunk=C3=A1t?= Date: Thu, 9 Apr 2026 21:17:30 +0200 Subject: [PATCH 3/3] Update sources/platform/actors/development/programming_interface/environment_variables.md Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> --- .../development/programming_interface/environment_variables.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sources/platform/actors/development/programming_interface/environment_variables.md b/sources/platform/actors/development/programming_interface/environment_variables.md index 8cb27bfda0..dd5dda4311 100644 --- a/sources/platform/actors/development/programming_interface/environment_variables.md +++ b/sources/platform/actors/development/programming_interface/environment_variables.md @@ -120,7 +120,7 @@ For sensitive data like API keys or passwords, enable the **Secret** option. Thi :::caution Visibility of environment variables in public Actors -When you [publish your Actor](/platform/actors/publishing/publish), non-secret environment variables are visible to anyone on the Actor detail page along with the source code. If you enable **Hide source files from Actor detail** in the Actor's **Settings**, non-secret environment variables are hidden as well. +When you [publish your Actor](/platform/actors/publishing/publish), environment variables not marked as **Secret** in Apify Console are visible to anyone on the Actor detail page along with the source code. If you enable **Hide source files from Actor detail** in the Actor's **Settings**, environment variables not marked as **Secret** in Apify Console are hidden as well. Secret environment variables are never exposed on the Actor detail page regardless of this setting. Always mark sensitive values as **Secret**.