@seekrit/cli 0.10.0 → 0.12.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +24 -2
- package/dist/index.js +1473 -1425
- package/package.json +3 -3
package/README.md
CHANGED
|
@@ -86,6 +86,28 @@ seekrit token revoke <tokenId>
|
|
|
86
86
|
|
|
87
87
|
See the [service tokens guide](https://seekrit.dev/docs/guides/service-tokens).
|
|
88
88
|
|
|
89
|
+
## Docker
|
|
90
|
+
|
|
91
|
+
The CLI also ships as a container image — the full toolchain on a Node runtime,
|
|
92
|
+
for CI runners and agent sandboxes. Multi-arch images (`linux/amd64` +
|
|
93
|
+
`linux/arm64`) are on Docker Hub as
|
|
94
|
+
[`seekritdev/cli`](https://hub.docker.com/r/seekritdev/cli):
|
|
95
|
+
|
|
96
|
+
```sh
|
|
97
|
+
docker run --rm \
|
|
98
|
+
-e SEEKRIT_TOKEN=skt_… \
|
|
99
|
+
-v "$PWD:/work" -w /work \
|
|
100
|
+
seekritdev/cli run -- ./deploy.sh
|
|
101
|
+
```
|
|
102
|
+
|
|
103
|
+
The entrypoint is `seekrit`, so pass subcommands directly (e.g.
|
|
104
|
+
`docker run seekritdev/cli secrets list`). It runs unprivileged (`node`) and
|
|
105
|
+
writes config under `$HOME/.config`. Tags: `:latest`, `:<version>` /
|
|
106
|
+
`:<major>.<minor>`, and `:edge` (latest `main`).
|
|
107
|
+
|
|
108
|
+
For a Node-free runtime image (inject secrets and exec, nothing else), prefer
|
|
109
|
+
the [`seekrit-run`](../run) launcher — `seekritdev/run`.
|
|
110
|
+
|
|
89
111
|
## Configuration
|
|
90
112
|
|
|
91
113
|
Credentials and defaults are read from (highest precedence first) environment
|
|
@@ -121,8 +143,8 @@ See the root [README](../../README.md) for the full end-to-end local loop.
|
|
|
121
143
|
### Build
|
|
122
144
|
|
|
123
145
|
The CLI is bundled with [tsdown](https://tsdown.dev). Workspace packages
|
|
124
|
-
(`@seekrit/*`) are inlined so the published package's only runtime
|
|
125
|
-
`commander`.
|
|
146
|
+
(`@seekrit/*`) are inlined, so the published package's only runtime dependencies
|
|
147
|
+
are `commander`, `zod`, and `@modelcontextprotocol/sdk`.
|
|
126
148
|
|
|
127
149
|
```sh
|
|
128
150
|
pnpm build # bundle to dist/index.js
|