ewilliams28/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-08-12 21:53:00 -06:00
Code Issues Packages Projects Releases Wiki Activity

feat(secrets): inject store env into agent exec (#121773)

Browse Source
This commit is contained in:
Peter Steinberger
2026-08-10 18:59:32 -07:00
committed by GitHub
parent 8aa0376f27
commit 52e3149ed7
6 changed files with 318 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/cli/secrets.md
+2
View File
@@ -92,6 +92,8 @@ openclaw secrets store get LOG_LEVEL
Secret values never appear in human, `--json`, or `--plain` output. `store get` refuses a `secret` entry as write-only by design and exits `2`; it exits `3` when the name does not exist. Environment-kind values are readable.
Team-scoped `env` entries also reach agent exec environments. Explicit per-call env wins over store values, and host/sandbox security filters can reject protected or credential-shaped names with a warning. `secret` entries are never exposed as subprocess env; use them through `store` SecretRefs instead.
### Remove values
```bash