CLI reference

storeenv run

Run a command with secrets injected as environment variables (no files written).

zsh

$ cd ~/code/bea-my-app
$ storeenv run -- node server.js
port 3000

$ storeenv run [cmd..]

Arguments

<cmd> Command to run, after --.

`--service <value>`	Use the secrets of one service (default: all, root first).
`--imports`	Include imported keys (local keys win; --no-imports to skip). Default: true.
`--allow-env <value>`	Allow a variable that changes how programs start (NODE_OPTIONS, PATH, LD_PRELOAD and others), by name.

Values are injected into the command's environment only; nothing is written to disk.
run refuses process control variables such as NODE_OPTIONS, PATH, LD_* and BASH_ENV unless you allow one by name with --allow-env, and refuses any value that isn't signed by a trusted writer. No flag changes that.
Signals (Ctrl+C, SIGTERM from docker stop) are passed to the command, and run exits with its exit code.

`--project <value>`	Project as <namespace/name> or its id (default: .storeenv.json, then this repository's remotes).
`--env <value>`	Environment name.
`--json`	Machine readable output.
`--yes, -y`	Skip confirmations.
`--color`	Coloured output (--no-color to turn off). Default: true.
`--verbose`	Show debug details.
`--api <value>`	API base URL of a self-hosted StoreEnv.
`--trust-writer <value>`	Trust a writer for this run: @login=SE:XXXX-XXXX-XXXX.
`--allow-unsigned`	pull and diff: use values that aren't signed by a trusted writer, after you confirm on a terminal (or with STOREENV_ALLOW_UNSIGNED=1). Never applies to run or copy.