fnox push

• Usage: fnox push [FLAGS] [KEYS]…

Copy secrets into write-only stores such as GitHub Actions or Vercel

Each secret's push field names targets from [targets]. fnox resolves the value through the secret's provider, as fnox get would, and writes it to every listed target. Targets that use a CLI receive the value on stdin.

Targets cannot be read back, so fnox stays the source of truth: run push again after changing a value.

Arguments

• [KEYS]… — Push only these keys

Flags

• -f --force — Push without asking for confirmation
• -n --dry-run — List what would be pushed without pushing anything
• -t --target <TARGET> — Push only to this target; repeat for several
• -h --help — Print help

Examples

Preview which secrets go where

fnox push --dry-run

Push every secret that lists targets

fnox push

Push one secret to one target

fnox push STRIPE_KEY --target gh

See also

• Push targets
• Target catalog