si-vault-ops

To run commands with decrypted environment variables safely, use the `si vault run` command. It executes your target command with decrypted secrets injected directly into the environment, preventing them from appearing in your shell history.

Managing encrypted secrets for environment variables involves using a vault system to initialize, set, and get sensitive data. This approach ensures secure storage and prevents accidental exposure of credentials during command execution.

You can initialize and configure trust relationships for encrypted secrets by using the vault's trust and recipient management operations. This establishes secure connections ensuring only authorized parties can access the encrypted data.

Yes, you can securely retrieve and update specific environment variables from the command line using the get and set operations. These commands interact directly with the encrypted vault to fetch or store sensitive data.

Using a vault for secure command execution prevents sensitive credentials from being exposed in your shell history or process lists. It manages trust relationships and injects decrypted environment variables safely at runtime.

You can check the status of your encrypted secrets and vault configuration by using the `check` and `status` operations. These commands verify the vault's initialization state and inspect the current secure environment variable workflows.