dotenvx run --mask

Inject masked values into a command.

By default, up to the first six characters are visible.

$ echo "SECRET=abcdefghijkl" > .env
$ echo "console.log(process.env.SECRET)" > index.js

$ dotenvx run --mask --quiet -- node index.js
abcdef******

Pass a number to control how many characters are visible.

$ dotenvx run --mask 0 --quiet -- node index.js
************