add repo + env secrets/variables

Author: sidpalas

.github/workflows/04-passing-data.yaml

@@ -44,6 +44,44 @@ jobs:
       - name: Inspect values inside job-2 (note FOO is unset)
         run: |
           echo "GLOBAL (workflow-level): $GLOBAL"
-          echo "JOB_2 (job-level):      $JOB_2"
-          echo "Value from job-1:       ${{ needs.job-1.outputs.foo }}"
-          echo "FOO in job-2:           ${FOO:-<UNSET>}"
+          echo "JOB_2 (job-level):       $JOB_2"
+          echo "Value from job-1:        ${{ needs.job-1.outputs.foo }}"
+          echo "FOO in job-2:            ${FOO:-<UNSET>}"
+
+  job-staging:
+    runs-on: ubuntu-24.04
+    environment: staging
+    env:
+      # Inject repository-level secret & variable into the shell
+      EXAMPLE_REPOSITORY_SECRET: ${{ secrets.EXAMPLE_REPOSITORY_SECRET }}
+      EXAMPLE_REPOSITORY_VARIABLE: ${{ vars.EXAMPLE_REPOSITORY_VARIABLE }}
+      # Inject environment-level items into the shell
+      EXAMPLE_ENVIRONMENT_SECRET: ${{ secrets.EXAMPLE_ENVIRONMENT_SECRET }}
+      EXAMPLE_ENVIRONMENT_VARIABLE: ${{ vars.EXAMPLE_ENVIRONMENT_VARIABLE }}
+
+    steps:
+      - name: Inspect values inside job
+        run: |
+          echo "Repo secret (masked):    $EXAMPLE_REPOSITORY_SECRET"
+          echo "Repo variable:           $EXAMPLE_REPOSITORY_VARIABLE"
+          echo "Env secret (masked):     $EXAMPLE_ENVIRONMENT_SECRET"
+          echo "Env variable:            $EXAMPLE_ENVIRONMENT_VARIABLE"
+
+  job-production:
+    runs-on: ubuntu-24.04
+    environment: production
+    env:
+      # Inject repository-level secret & variable into the shell
+      EXAMPLE_REPOSITORY_SECRET: ${{ secrets.EXAMPLE_REPOSITORY_SECRET }}
+      EXAMPLE_REPOSITORY_VARIABLE: ${{ vars.EXAMPLE_REPOSITORY_VARIABLE }}
+      # Inject environment-level items into the shell
+      EXAMPLE_ENVIRONMENT_SECRET: ${{ secrets.EXAMPLE_ENVIRONMENT_SECRET }}
+      EXAMPLE_ENVIRONMENT_VARIABLE: ${{ vars.EXAMPLE_ENVIRONMENT_VARIABLE }}
+
+    steps:
+      - name: Inspect values inside job
+        run: |
+          echo "Repo secret (masked):    $EXAMPLE_REPOSITORY_SECRET"
+          echo "Repo variable:           $EXAMPLE_REPOSITORY_VARIABLE"
+          echo "Env secret (masked):     $EXAMPLE_ENVIRONMENT_SECRET"
+          echo "Env variable:            $EXAMPLE_ENVIRONMENT_VARIABLE"