This documentation states that secret variables are
Not decrypted into environment variables. So scripts and programs run by your build steps are not
You can supply variables to pass to tasks in the Variables page of the build definition:
Then they can be passed in to a task as an input like so: