CLI reference

storeenv pull

Download, decrypt and write the env files you can read.

zsh

$ cd ~/code/bea-my-app
$ storeenv pull --yes
  Project   ada/my-app   environment default   v 1dec82a
    + .env      4 keys
  Restored 1 file.

$ storeenv pull

Flags

`--service <value>`	Pull the files of one service only.
`--version <value>`	Pull an exact version id.
`--all`	Pull every environment you can read.
`--force`	Overwrite local changes (a backup is kept).
`--stdout`	Print the decrypted file and write nothing (logged).
`--imports`	Also write imported keys to .storeenv/imports/<env>.env (--no-imports to skip). Default: true.

By default pull restores the default environment plus every environment whose file already exists here. --env, STOREENV_ENV, storeenv env use and branch rules pick one (see How a folder finds its project).
Local changes that were never pushed are kept until you choose what to do; --force overwrites them and keeps a backup next to the file.
Every value is checked before it is written: signature, signer and that the signer is a writer you trust (see Signed writes and the key log).

`--project <value>`	Project as <namespace/name> or its id (default: .storeenv.json, then this repository's remotes).
`--env <value>`	Environment name.
`--json`	Machine readable output.
`--yes, -y`	Skip confirmations.
`--color`	Coloured output (--no-color to turn off). Default: true.
`--verbose`	Show debug details.
`--api <value>`	API base URL of a self-hosted StoreEnv.
`--trust-writer <value>`	Trust a writer for this run: @login=SE:XXXX-XXXX-XXXX.
`--allow-unsigned`	pull and diff: use values that aren't signed by a trusted writer, after you confirm on a terminal (or with STOREENV_ALLOW_UNSIGNED=1). Never applies to run or copy.