{
  "description": "Check, read and run commands with secrets declared in secretspec.toml. Set, import, init and provider configuration subcommands are left out.",
  "name": "secretspec",
  "subcommands": [
    {
      "name": "check",
      "description": "Verify that every declared secret resolves, without printing values.",
      "options": [
        {
          "names": [
            "--profile",
            "-P"
          ],
          "description": "Profile",
          "args": {
            "name": "profile",
            "isOptional": false
          }
        },
        {
          "names": [
            "--provider",
            "-p"
          ],
          "description": "Provider URI or name, for example env or dotenv://.env.",
          "args": {
            "name": "provider",
            "description": "Provider URI or name, for example env or dotenv://.env.",
            "isOptional": false
          }
        },
        {
          "names": [
            "--file",
            "-f"
          ],
          "description": "secretspec.toml path",
          "args": {
            "name": "file",
            "isOptional": false,
            "template": "filepaths"
          }
        },
        {
          "names": [
            "--no-prompt",
            "-n"
          ],
          "description": "Do not prompt"
        },
        {
          "names": [
            "--json"
          ],
          "description": "JSON report"
        },
        {
          "names": [
            "--explain"
          ],
          "description": "Explain resolution"
        }
      ]
    },
    {
      "name": "get",
      "description": "Print the value of a single secret to the terminal.",
      "options": [
        {
          "names": [
            "--profile",
            "-P"
          ],
          "description": "Profile",
          "args": {
            "name": "profile",
            "isOptional": false
          }
        },
        {
          "names": [
            "--provider",
            "-p"
          ],
          "description": "Provider",
          "args": {
            "name": "provider",
            "isOptional": false
          }
        },
        {
          "names": [
            "--file",
            "-f"
          ],
          "description": "secretspec.toml path",
          "args": {
            "name": "file",
            "isOptional": false,
            "template": "filepaths"
          }
        }
      ],
      "args": [
        {
          "name": "name",
          "isOptional": false
        }
      ]
    },
    {
      "name": "run",
      "description": "Run a command with the declared secrets injected as environment variables.",
      "options": [
        {
          "names": [
            "--profile",
            "-P"
          ],
          "description": "Profile",
          "args": {
            "name": "profile",
            "isOptional": false
          }
        },
        {
          "names": [
            "--provider",
            "-p"
          ],
          "description": "Provider",
          "args": {
            "name": "provider",
            "isOptional": false
          }
        },
        {
          "names": [
            "--reason"
          ],
          "description": "Recorded by providers that support audit logging.",
          "args": {
            "name": "reason",
            "description": "Recorded by providers that support audit logging.",
            "isOptional": false
          }
        },
        {
          "names": [
            "--file",
            "-f"
          ],
          "description": "secretspec.toml path",
          "args": {
            "name": "file",
            "isOptional": false,
            "template": "filepaths"
          }
        }
      ],
      "args": [
        {
          "name": "command",
          "description": "Command and arguments to run, placed after --.",
          "isOptional": false,
          "isVariadic": true
        }
      ]
    }
  ]
}