# SecretReference - `uri` (`String`): URI identifying where the secret can be resolved (e.g., vault://, env://) - `hints` (`java.util.Map`): Optional metadata to help resolvers decode the secret (e.g., {"encoding":"base64"}) [Java](../../java.md)