Secrets — Ignitify docs

secret:set

Store a secret value under a name, read from stdin.

needs API key
--json: full

synopsis

$ ignitify secret:set <NAME> --stdin

terminal

$ printf %s "$DB_PASSWORD" | ignitify secret:set DB_PASSWORD --stdin✓ secret DB_PASSWORD stored

Value on the command line

$ ignitify secret:set DB_PASSWORD --value hunter2Error: secret:set takes no value on argv: it is visible in `ps` and is written to your shell history. Pipe it on stdin, e.g.  ignitify secret:set <NAME> --stdin < value-file  printf %s "$VALUE" | ignitify secret:set <NAME> --stdin⚠️  The value you just typed is already in your history — rotate it.

More examples (1)

Empty stdin

$ ignitify secret:set DB_PASSWORD --stdin < /dev/nullError: secret:set read an empty value from stdin — nothing was stored (pipe the value in: `--stdin < value-file`)

Flag	Value	Default	Description
`<NAME>`required	—	—	The secret name. List it in `secrets` in task.yaml to use it.
`--stdin`required	—	—	Read the value from stdin. A value on the command line is refused.

secret:list

List the names of your secrets and when each was updated.

needs API key
--json: full

synopsis

$ ignitify secret:list

terminal

$ ignitify secret:listname         updated_at───────────  ────────────────────────DB_PASSWORD  2026-10-14T09:12:03.540ZSTRIPE_KEY   2026-10-14T09:12:04.118Z

More examples (1)

No secrets

$ ignitify secret:list(no secrets)Store one with: ignitify secret:set <NAME> --stdin

terminal

$ ignitify secret:list --json

--json

{
  "secrets": [
    {
      "name": "DB_PASSWORD",
      "updated_at": "2026-10-14T09:12:03.540Z"
    }
  ]
}

secret:delete

Delete a secret.

needs API key
asks to confirm
deletes data
--json: full

synopsis

$ ignitify secret:delete <NAME> [--yes]

terminal

$ ignitify secret:delete DB_PASSWORDWill delete secret DB_PASSWORD. Its value cannot be read back.Proceed? [y/N] y✓ secret DB_PASSWORD removed

No terminal and no --yes

$ ignitify secret:delete DB_PASSWORDWill delete secret DB_PASSWORD. Its value cannot be read back.Error: Refusing to proceed: not a TTY. Re-run with --yes to confirm non-interactively.Aborted.

Flag	Value	Default	Description
`<NAME>`required	—	—	The secret name.
`--yes, -y`	—	—	Skip the question.

What happens

Prints which secret it will delete.
Asks you to confirm, unless you pass --yes.
Deletes the secret.
Prints the name.