Specifies how long (in seconds) resolved secret values are kept in Jenkins memory. Disabled by default (0).

By default, every time Jenkins needs a secret, the plugin runs the Bitwarden CLI (bw get item), which can take several seconds. Operations that resolve credentials very often, such as SCM scans of a GitHub Organization folder, can become slow as a result.

Setting this to a value greater than 0 keeps each resolved item in memory for up to that many seconds, so repeated lookups are served instantly and concurrent requests for the same item share a single CLI call.

Security considerations:

• Cached secrets are held only in memory, remain encrypted with Jenkins' Secret wrapper, and are never written to disk.
• The cache is cleared on every vault sync (see Item List Cache Duration), when Sync Vault is used, and when the plugin configuration changes. A secret changed in Bitwarden is therefore picked up after the next sync at the latest.
• Use the shortest duration that solves your performance problem. Leave it at 0 if secrets must always be fetched live.

Allowed range: 0 to 3600 seconds (1 hour). The default is 0 (disabled).