Skip to main content
Store and manage credentials in the OS keyring for use with cordon’s keyring secret source.

cordon secret set

Store a secret in the OS keyring.
cordon secret set --service <SERVICE> --account <ACCOUNT>
Prompts for the secret value interactively (the value is not echoed to the terminal).
OptionDescription
--serviceService name (matches service in config)
--accountAccount name (matches account in config)

Example

# Store a credential
cordon secret set --service cordon --account stripe-api-key
# Enter secret: ****

# Reference it in cordon.yaml
# secret:
#   source: keyring
#   service: cordon
#   account: stripe-api-key
On macOS, use cordon secret set rather than the security CLI to store credentials. Cordon needs to own the keychain entry to read it without triggering an authorization dialog on every startup. See Secret Sources for details.