Objects Storage

Overview

Use Objects for small, temporary artifacts that are safe for anyone with the returned URL to access. It is not a backup service, package registry, secret store, or access-controlled file system.

Read the API reference before relying on a status code or field not covered here.

Keep uploads safe

• Only upload public, non-sensitive files. Never upload credentials, tokens, private source, personal data, database dumps, or material that needs access control.
• Confirm the local file is at most 10 MiB before uploading.
• Do not attempt custom paths, directory listing, multipart form data, or a direct bucket endpoint. The public API intentionally does not provide them.
• Objects expire after seven days. A later 404 can mean either expiry or an unknown object.
• The returned deleteToken is a private capability. Never include it in a URL, repository, issue, chat summary, or build log.

Upload an artifact