{
  "description": "Run a command with fnox secrets in its environment. Profiles, leases and other fnox subcommands are not covered.",
  "name": "fnox",
  "subcommands": [
    {
      "name": "exec",
      "description": "Run a command with secrets",
      "options": [
        {
          "names": [
            "--only"
          ],
          "description": "Secret names or globs such as AWS_*.",
          "args": {
            "name": "only",
            "description": "Secret names or globs such as AWS_*.",
            "isOptional": false,
            "isVariadic": true
          },
          "isRepeatable": true
        },
        {
          "names": [
            "--except"
          ],
          "description": "Except these secrets",
          "args": {
            "name": "except",
            "isOptional": false,
            "isVariadic": true
          },
          "isRepeatable": true
        },
        {
          "names": [
            "--redact"
          ],
          "description": "Redact secrets in output"
        }
      ],
      "args": [
        {
          "name": "command",
          "description": "The command and its arguments, run after `--`.",
          "isOptional": false,
          "isVariadic": true
        }
      ]
    }
  ]
}