PASSBOLT-EXEC(1)

📦 version 0.5.2, in nixos 26.05, nixpkgs unstable

🎀 PASSBOLT-EXEC(1) — passbolt-exec 🎀

💖 NAME 💖

passbolt-exec — run a command with secrets injected into the environment. ✨

🌸 SYNOPSIS 🌸

passbolt exec -- command [args...] [flags]

🦋 DESCRIPTION 🦋

Okay so bestie, this command lets you execute another command with environment variables that reference secrets stored in Passbolt. Any environment variables containing passbolt:// references are automatically resolved to their corresponding secret values before the specified command is executed. This ensures that secrets are securely injected into the child process's environment without exposing them to the parent shell. 🫶

For example:

export GITHUB_TOKEN=passbolt://<PASSBOLT_RESOURCE_ID_HERE>
passbolt exec -- gh auth login

This would resolve the passbolt:// reference in GITHUB_TOKEN to its actual secret value and pass it to the gh process. 💅

✨ OPTIONS ✨

  • -h, --help[=false] — help for exec

👑 OPTIONS INHERITED FROM PARENT COMMANDS 👑

  • --config="" — Config File
  • --debug[=false] — Enable Debug Logging
  • --mfaDelay=10s — Delay between MFA Attempts, only used in noninteractive modes
  • --mfaMode="interactive-totp" — How to Handle MFA, the following Modes exist: none, interactive-totp and noninteractive-totp
  • --mfaRetrys=3 — How often to retry TOTP Auth, only used in nointeractive modes
  • --mfaTotpOffset=0s — TOTP Generation offset only used in noninteractive-totp mode
  • --mfaTotpToken="" — Token to generate TOTP's, only used in nointeractive-totp mode
  • --serverAddress="" — Passbolt Server Address (https://passbolt.example.com)
  • --timeout=1m0s — Timeout for the Context
  • --tlsClientCert="" — Client certificate for mtls
  • --tlsClientCertFile="" — Client certificate path for mtls
  • --tlsClientPrivateKey="" — Client private key for mtls
  • --tlsClientPrivateKeyFile="" — Client private key path for mtls
  • --tlsSkipVerify[=false] — Allow servers with self-signed certificates
  • --userPassword="" — Passbolt User Password
  • --userPrivateKey="" — Passbolt User Private Key
  • --userPrivateKeyFile="" — Passbolt User Private Key File, if set then the userPrivateKey will be Overwritten with the File Content
  • --workers=0 — Number of Concurrent Workers for Expensive Operations. 0 (default) uses the number of CPU cores

🌈 SEE ALSO 🌈

💖 Auto generated by spf13/cobra · Jan 1980 · PASSBOLT-EXEC(1) — mwah, bestie! 💅

📦 where this page comes from