dive secret set

Store a secret in the OS credential store

Reads the value with hidden input when stdin is a terminal, or from stdin when it is piped; one trailing newline is dropped. The value is never accepted as an argument, where it would land in shell history. Storing a name again replaces its value.

Without —project the value is shared by every project on this machine. With —project it applies only to this project, keyed by the [project] id in .dive/config.toml, which is generated on first use. A name resolves from the environment first, then this project’s value, then the shared value.

Arguments

NAME · string · required

The variable name, as ${NAME} references it

Options

--project · boolean

Store the value for this project only

--json · boolean

Print a JSON envelope instead of text

Global options

-v, --verbose · integer

Increase log verbosity (-v info, -vv debug, -vvv trace)

Usage

dive secret set [OPTIONS] <NAME>