StoreEnv Beta
Documentation

Install the CLI, learn the model and look up every command.

CLI reference

storeenv copy

Copy keys from another project into this one (decrypted and re-encrypted on this device).

Global flags
zsh
$ cd ~/code/my-app
$ storeenv copy --from ada/shared-stripe --env default --only STRIPE_KEY --dry-run
  Copy      ada/shared-stripe default  ->  ada/my-app default
  SERVICE   FILE   CHANGES
  root      .env   +1
  Dry run: nothing was uploaded.
$ storeenv copy

Flags

--from <value>Source project: namespace/name or id.
--from-env <value>Source environment (default: the destination environment).
--to <value>Destination project (default: this folder's project; same as --project).
--only <value>Key patterns to copy, like STRIPE_* (default: all you can read).
--service <value>Copy one service's keys only.
--message <value>, -mVersion message.
--dry-runShow what would change and upload nothing.
--skip-unverifiedEncrypt only for readers whose keys are verified; the rest wait for a key share.

Good to know

  • Copied keys become this project's own secrets: later changes at the source don't follow. Use import to follow a source.
  • copy refuses values that aren't signed by a writer you trust, even with --allow-unsigned.

Related commands

storeenv importstoreenv push

Global flags

--project <value>Project as <namespace/name> or its id (default: .storeenv.json, then this repository's remotes).
--env <value>Environment name.
--jsonMachine readable output.
--yes, -ySkip confirmations.
--colorColoured output (--no-color to turn off). Default: true.
--verboseShow debug details.
--api <value>API base URL of a self-hosted StoreEnv.
--trust-writer <value>Trust a writer for this run: @login=SE:XXXX-XXXX-XXXX.
--allow-unsignedpull and diff: use values that aren't signed by a trusted writer, after you confirm on a terminal (or with STOREENV_ALLOW_UNSIGNED=1). Never applies to run or copy.
Previous import Next status