CLI Reference
Complete reference for all dotset commands.Installation
Core Commands
dotset init
Initialize a new dotset project.
| Option | Description |
|---|---|
--name <name> | Project name |
--cloud | Create cloud project immediately |
--axion | Enable Secrets module |
--gluon | Enable Security module |
--hadron | Enable Local CI module |
--tachyon | Enable Tunnels module |
dotset run
Run a command with secrets injected and security monitoring enabled.
| Option | Description |
|---|---|
--scope <env> | Environment scope: development, staging, production |
-s, --service <name> | Service to scope secrets to |
--no-secrets | Disable secret injection |
--no-monitor | Disable security monitoring |
--mode <mode> | Protection mode: detect, redact, block |
dotset login
Authenticate with the dotset cloud.
dotset logout
Clear stored credentials.
dotset status
Show project and authentication status.
Secrets Commands
dotset secrets set
Set a secret value.
| Option | Description |
|---|---|
--scope <env> | Environment scope (default: development) |
-s, --service <name> | Service to scope the secret to |
dotset secrets get
Get a secret value.
dotset secrets list
List all secrets.
| Option | Description |
|---|---|
--scope <env> | Environment scope |
--show-values | Show secret values (use with caution) |
dotset secrets delete
Delete a secret.
Security Commands
dotset scan
Run static security analysis.
| Option | Description |
|---|---|
--fix | Attempt to fix issues automatically |
--json | Output results as JSON |
dotset sbom
Generate a Software Bill of Materials.
| Option | Description |
|---|---|
--format <format> | Output format: cyclonedx, spdx |
-o, --output <file> | Output file path |
--static | Generate from package.json |
CI Commands
dotset ci
Run GitHub Actions jobs locally.
| Option | Description |
|---|---|
--workflow <path> | Path to workflow file |
--scope <env> | Environment scope for secrets |
--mode <mode> | Protection mode: detect, redact, block |
--list | List available workflows and jobs |
--dry-run | Preview without executing |
--no-secrets | Disable secret injection |
--no-monitor | Disable leak monitoring |
Tunnel Commands
dotset share
Share localhost via secure tunnel.
| Option | Description |
|---|---|
--subdomain <name> | Request specific subdomain |
--inspect | Enable request inspector |
--auth | Require authentication |
--project <id> | Link to a specific project |