Part of my build process involves downloading a specific dependency which requires a key. Obviously I don't want to commit the key to git. Most real CI solutions allow you to add secrets via their UI and then you can access them in the build script via env variables. Can't find any documentation on doing this with Xcode Cloud - is it possible?

After following the guides, I have Xcode Cloud hooked up to my Gitlab and it's all working nicely. However I want to also have the build artefacts stored on Gitlab also. I know it will involve a ci_post_xcodebuild.sh script but I can't find any information on what I actually need to do. I don't want to be manually downloading them for every release!