Staging vs production environnement with the same code base

10

How would you pass secrets for the production app ( --app applive) in a gitlab yaml file ?

build-time secrets or run-time?

Don’t use GitLab, but one can import secrets into its CI env via GitLab secrets, I believe?