KoshKOSH

kosh edit

Replace the value of an existing secret.

Overview

kosh edit replaces the encrypted value of an existing secret. The key name and vault reference remain the same; only the ciphertext is updated.

Usage

kosh edit --key <NAME>

Flags

FlagShortDescription
--key <NAME>-kName of the secret to update

Example

$ kosh edit --key DATABASE_URL
Current value: [hidden]
New value: [hidden]
✓ Updated DATABASE_URL

Notes

  • The vault reference (kosh:ref:v1:...) in your .env file will be updated to point to the new ciphertext.
  • Use kosh rotate if you want a new reference alongside a new value.
  • Changes are local until you kosh sync --push.

kosh run

Run a command with secrets injected into its environment. Output is automatically redacted.

kosh rotate

Rotate a secret, generate a new value and a new encrypted reference.

On this page

OverviewUsageFlagsExampleNotes