fnox check

• Usage: fnox check [-a --all]
• Aliases: c

Verify that the active profile's secrets resolve, without printing them

Validates the config, then resolves each secret that uses a provider and whose if_missing is error. References to unknown providers are reported as well. Values are never printed.

Secrets without a provider are not resolved. One with no default is reported only when its own if_missing is error or warn; --if-missing and FNOX_IF_MISSING do not apply to it, so an environment-only secret that is unset can still pass.

--all also resolves secrets whose if_missing is warn or ignore; their failures are reported as warnings, or not at all for ignore. Problems go to stderr, and fnox exits 1 when any error is found.

Flags

• -a --all — Also resolve secrets whose if_missing is warn or ignore
• -h --help — Print help

Examples

Resolve every secret in the active profile

fnox check --all

Treat every provider-backed secret as required

fnox check --if-missing error

Check another profile

fnox -P production check --all

See also

• Troubleshooting
• Missing secrets