Variables Reference
For a complete list of the automatically injected run metadata, see Special Environment Variables.
Environment Variables
System Environment Variable Filtering
For security, Boltbase filters which system environment variables are passed to step processes and sub DAGs.
How It Works:
System environment variables are available for expansion (${VAR}) when the DAG configuration is parsed, but only filtered variables are passed to the actual step execution environment.
Filtered Variables:
Only these system environment variables are automatically passed to step processes and sub DAGs:
- Whitelisted:
PATH,HOME,LANG,TZ,SHELL - Allowed Prefixes:
BOLTBASE_*,LC_*,DAG_*
The DAG_* prefix includes the special environment variables that Boltbase automatically sets (see below).
What This Means:
You can use ${AWS_SECRET_ACCESS_KEY} in your DAG YAML for variable expansion, but the AWS_SECRET_ACCESS_KEY variable itself won't be available in the environment when your step commands run unless you explicitly define it in the env section.
Defining Environment Variables
Set environment variables available to all steps:
env:
- LOG_LEVEL: debug
- DATA_DIR: /tmp/data
- API_URL: https://api.example.com
- API_KEY: ${SECRET_API_KEY} # Explicitly reference system environmentImportant: To use sensitive system environment variables in your workflows, you must explicitly reference them in your env section as shown above. They will not be automatically available.
Variable Expansion
Reference other variables:
env:
- BASE_DIR: ${HOME}/data
- INPUT_DIR: ${BASE_DIR}/input
- OUTPUT_DIR: ${BASE_DIR}/output
- CONFIG_FILE: ${INPUT_DIR}/config.yamlUnknown Variable Handling
When a variable is referenced but not defined in Boltbase's context, the behavior depends on the execution context:
Shell expansion enabled (default for local shell execution): Unknown variables become empty strings. This is standard POSIX shell behavior.
Non-shell executors (docker, http, ssh, jq, mail, etc.): OS-only variables not defined in the DAG scope are preserved as-is, letting the target environment resolve them. DAG-scoped variables (env, params, secrets, step outputs) are still expanded normally.
# Example: Non-shell executor (SSH)
env:
- DEPLOY_BRANCH: main
steps:
- type: ssh
config:
user: deploy
host: remote.example.com
command: |
cd $HOME/app # $HOME preserved — remote shell resolves it
git checkout ${DEPLOY_BRANCH} # Expanded by Boltbase — defined in DAG envIn this example, $HOME is not defined in the DAG scope, so it passes through unchanged to the remote shell. ${DEPLOY_BRANCH} is defined in the DAG env:, so Boltbase expands it before sending.
Literal Dollar Signs
In non-shell contexts (docker, http, ssh, jq, mail, etc.), you can emit a literal $ by escaping it with a backslash:
env:
- PRICE: '\$9.99' # Becomes $9.99 at runtimeNotes:
\$is only unescaped when Boltbase is the final evaluator (non-shell executors and config fields).- Shell-executed commands keep native shell semantics. Use shell escaping there.
- To get a literal
$$in non-shell contexts, escape both dollars:\$\$. - In YAML, single quotes preserve backslashes; with double quotes, escape the backslash (e.g.,
"\\$9.99").
Loading from .env Files
Load variables from dotenv files:
# Single file
dotenv: .env
# Multiple files (loaded in order)
dotenv:
- .env
- .env.local
- configs/.env.${ENVIRONMENT}Example .env file:
DATABASE_URL=postgres://localhost/mydb
API_KEY=secret123
DEBUG=trueParameters
Positional Parameters
Define default positional parameters:
params: first second third
steps:
- command: echo "Args: $1 $2 $3"Run with custom values:
boltbase start workflow.yaml -- one two threeNamed Parameters
Define named parameters with defaults:
params:
- ENVIRONMENT: dev
- PORT: 8080
- DEBUG: false
steps:
- command: ./server --env=${ENVIRONMENT} --port=${PORT} --debug=${DEBUG}Override at runtime:
boltbase start workflow.yaml -- ENVIRONMENT=prod PORT=80 DEBUG=trueAccessing Parameters as JSON
Every step receives the full parameter map encoded as JSON via the BOLTBASE_PARAMS_JSON environment variable. This value reflects the merged defaults plus any runtime overrides, and when a run is started with JSON parameters, the original payload is preserved.
steps:
- name: print params
command: echo "Raw payload: ${BOLTBASE_PARAMS_JSON}"
- name: batch size
type: jq
config:
raw: true
script: ${BOLTBASE_PARAMS_JSON}
command: '"Batch size: \(.batchSize // "n/a")"'Use this when downstream scripts prefer structured data or when you need access to parameters that were provided as nested JSON.
Mixed Parameters
Combine positional and named parameters:
params:
- ENVIRONMENT: dev
- VERSION: latest
steps:
- command: echo "Deploying $1 to ${ENVIRONMENT} version ${VERSION}"Run with:
boltbase start workflow.yaml -- myapp ENVIRONMENT=prod VERSION=1.2.3Command Substitution
Execute commands and use their output:
env:
- TODAY: "`date +%Y-%m-%d`"
- HOSTNAME: "`hostname -f`"
- GIT_COMMIT: "`git rev-parse HEAD`"
params:
- TIMESTAMP: "`date +%s`"
- USER_COUNT: "`wc -l < users.txt`"
steps:
- command: echo "Deploy on ${TODAY} from ${HOSTNAME}"Output Variables
Capturing Output
Capture command output to use in later steps:
steps:
- command: cat VERSION
output: VERSION
- command: docker build -t myapp:${VERSION} .Output Size Limits
Control maximum output size:
# Global limit for all steps
max_output_size: 5242880 # 5MB
steps:
- command: cat large-file.json
output: FILE_CONTENT # Fails if > 5MBRedirecting Output
Redirect to files instead of capturing:
steps:
- command: python report.py
stdout: /tmp/report.txt
stderr: /tmp/errors.logJSON Path References
Access nested values in JSON output:
steps:
- command: |
echo '{"db": {"host": "localhost", "port": 5432}}'
output: CONFIG
- command: psql -h ${CONFIG.db.host} -p ${CONFIG.db.port}Sub-workflow Output
Access outputs from nested workflows:
steps:
- call: etl-workflow
params: "DATE=${TODAY}"
output: ETL_RESULT
- command: |
echo "Records processed: ${ETL_RESULT.outputs.record_count}"
echo "Status: ${ETL_RESULT.outputs.status}"Step ID References
Reference step properties using IDs:
steps:
- id: risky
command: 'sh -c "if [ $((RANDOM % 2)) -eq 0 ]; then echo Success; else echo Failed && exit 1; fi"'
continue_on: failed
- command: |
if [ "${risky.exit_code}" = "0" ]; then
echo "Success! Output was:"
cat ${risky.stdout} # Read content from file path
else
echo "Failed with code ${risky.exit_code}"
cat ${risky.stderr} # Read content from file path
fiAvailable properties:
${id.exit_code}- Exit code of the step (as a string, e.g.,"0"or"1")${id.exit_code}- Alternative snake_case syntax for exit code${id.stdout}- Path to stdout log file${id.stderr}- Path to stderr log file
Important:
${id.stdout}and${id.stderr}return file paths, not the actual output content.
- To read content: use
cat ${id.stdout}- To capture output for later steps: use the
output:field instead- Substring slicing like
${id.stdout:0:5}operates on the file path string, not file content
Variable Precedence
Boltbase resolves variables in two places: when interpolating ${VAR} in DAG fields, and when constructing the step process environment.
Interpolation precedence (highest to lowest)
Step-level environment
yamlsteps: - env: - VAR: step-valueOutput variables from earlier steps
yamlsteps: - command: echo 42 output: VARSecrets
yamlsecrets: - name: VAR provider: env key: VARDAG-level environment (including dotenv)
yamlenv: - VAR: env-value dotenv: .envParameters (defaults + CLI overrides)
yamlparams: - VAR: dag-defaultProcess environment fallback For shell commands, system environment variables are used if the key is not set by any of the sources above, and are still subject to filtering at execution time. For non-shell executors (docker, http, ssh, jq, mail, etc.), OS environment is not used as a fallback during variable interpolation — only DAG-scoped sources (levels 1–5) are checked. OS-only variables pass through unchanged, letting the target environment resolve them.
Step process environment precedence (lowest to highest)
- Filtered system environment
- DAG runtime environment (params +
env+.env+ run metadata) If a key appears in bothparamsandenv, theenvvalue wins. - Secrets
- Step-level environment
- Output variables from earlier steps
See Also
- Writing Workflows - Detailed guide on using variables
- YAML Specification - Complete YAML format reference
- Configuration Reference - Server configuration variables
