it isn't really secret, it is in travis-core, it is called config.rb. We load the yamlized config from the env and merge it into this hashr type structure.