pinset env access revoke

When to use

Use when a collaborator leaves or a CI identity rotates. Find the ID with env access list first.

Examples

pinset env access revoke <request-id> --profile dev

Replace the placeholder with the actual ID. Result: removes authorization and updates ciphertext; commit the changed configuration and profile.

Behavior

Requires trust and decryption access. Updates configuration, ciphertext and state transactionally without network access. A key retained by an owner or another grant keeps access. Previously copied secrets cannot be recalled; also rotate the service secret when needed.

Parameters, exit codes and common errors

Success exits 0; profile, authorization and decryption errors exit 1. Confirm the ID and profile in the grants list.