--redact -- codex exec
Runtime leak protection and log redaction for Codex exec. Run Codex non-interactively with real secrets while redacting them from output and logs.
Usage
Runtime leak protection for Codex exec: Codex receives the real environment variables, but log redaction replaces any matching values it prints with [REDACTED].
$ echo "SECRET=super-secret-value" > .env
$ dotenvx run --redact --quiet -- codex exec 'Print the value of $SECRET'
[REDACTED]