My CICD setup is to leverage GitHub workflows fed by secrets and vars from my springcloudconfig server. I am sharing secrets and vars between: * Different GitHub repositories (Infra Repo vs App Repo) * Build time settings and runtime settings. I've created template-able GitHub workflows that call pulumi typescript code