NAME¶

passbolt-exec - Run a command with secrets injected into the environment.

SYNOPSIS¶

passbolt exec -- command [args...] [flags]

DESCRIPTION¶

The command allows you to execute another command with environment variables that reference secrets stored in Passbolt. Any environment variables containing passbolt:// references are automatically resolved to their corresponding secret values before the specified command is executed. This ensures that secrets are securely injected into the child process's environment without exposing them to the parent shell.

For example:
export GITHUB_TOKEN=passbolt://<PASSBOLT_RESOURCE_ID_HERE>
passbolt exec -- gh auth login
This would resolve the passbolt:// reference in GITHUB_TOKEN to its actual secret value and pass it to the gh process.

OPTIONS¶

-h, --help[=false] help for exec

OPTIONS INHERITED FROM PARENT COMMANDS¶

--config="" Config File

--debug[=false] Enable Debug Logging

--mfaDelay=10s Delay between MFA Attempts, only used in noninteractive modes

--mfaMode="interactive-totp" How to Handle MFA, the following Modes exist: none, interactive-totp and noninteractive-totp

--mfaRetrys=3 How often to retry TOTP Auth, only used in nointeractive modes

--mfaTotpOffset=0s TOTP Generation offset only used in noninteractive-totp mode

--mfaTotpToken="" Token to generate TOTP's, only used in nointeractive-totp mode

--serverAddress="" Passbolt Server Address (https://passbolt.example.com)

--timeout=1m0s Timeout for the Context

--tlsClientCert="" Client certificate for mtls

--tlsClientCertFile="" Client certificate path for mtls

--tlsClientPrivateKey="" Client private key for mtls

--tlsClientPrivateKeyFile="" Client private key path for mtls

--tlsSkipVerify[=false] Allow servers with self-signed certificates

--userPassword="" Passbolt User Password

--userPrivateKey="" Passbolt User Private Key

--userPrivateKeyFile="" Passbolt User Private Key File, if set then the userPrivateKey will be Overwritten with the File Content

--workers=0 Number of Concurrent Workers for Expensive Operations. 0 (default) uses the number of CPU cores

SEE ALSO¶

passbolt(1)