Encrypted project environment commands
pinset env set
Add or replace one encrypted variable in a profile.
View source on GitHub ↗| Field | Description |
|---|---|
| Purpose | Add or replace one encrypted variable in a profile. |
| Syntax and arguments | pinset env set <name> [--profile <name>] [--stdin] [--cwd <path>]. Without --stdin, Pinset reads the value with hidden terminal input; the value is never a positional argument. |
| Modifies state | Yes. Decrypts, modifies, re-encrypts with fresh age file-key material, and atomically replaces the selected ciphertext under a file lock. |
| Example | pinset env set DATABASE_URL --profile development |
| JSON | No. |
| Key errors | No selected/matching identity, invalid variable name, process input failure, malformed/oversized profile, unsafe profile path, or encryption/write failure. |
Portable names match [A-Za-z_][A-Za-z0-9_]*. Names are unique ignoring ASCII case; PATH and every PINSET_* name are reserved. Values may be empty or multiline but may not contain NUL. --stdin reads the entire standard input and removes one trailing line ending; ensure the producer does not expose the value in its own arguments, logs, or files.
/en/docs/commands/env-setPinset 2.1