secrets
Usage: deepline secrets [options] [command]
Manage play secrets without revealing values.
Options:
-h, --help display help for command
Commands:
list [options] List secret metadata only.
check [options] <name> Check secret metadata, or effective
availability with --play.
set [options] <name> [forbidden...] Set or rotate a secret without exposing
its value in argv.
note [options] <secret-id> [note] Add, replace, or clear a non-sensitive
note on one secret.
help [command] display help for command
secrets list
Usage: deepline secrets list [options]
List secret metadata only.
Options:
--json Emit JSON output
-h, --help display help for command
secrets check
Usage: deepline secrets check [options] <name>
Check secret metadata, or effective availability with --play.
Arguments:
name Secret name
Options:
--play <name> Validate the effective secret for a bare Play name and active
version
--json Emit JSON output
-h, --help display help for command
secrets set
Usage: deepline secrets set [options] <name> [forbidden...]
Set or rotate a secret without exposing its value in argv.
Arguments:
name Secret name
forbidden Do not pass secret values here
Options:
--json Emit JSON output
--scope <scope> Secret scope: org or play; --play implies play
--play <name> Play name for play-scoped secrets
--note <note> Optional non-sensitive memo (maximum 500 characters)
--value-stdin Read the value from piped stdin
--from-env <name> Read the value from an environment variable
--from-file <path> Read the value from a file
-h, --help display help for command
secrets note
Usage: deepline secrets note [options] <secret-id> [note]
Add, replace, or clear a non-sensitive note on one secret.
Arguments:
secret-id Secret ID from `deepline secrets list`
note Note text (maximum 500 characters)
Options:
--clear Clear the existing note
--dry-run Show the note change without saving it
--json Emit JSON output
-h, --help display help for command