Redact secrets in Codex

Learn how to use secrets in Codex while redacting them from its output.

Codex receives the real environment variables, but any matching values it prints are replaced with [REDACTED].

1. Install

Get the Dotenvx CLI.

$ curl -sfS https://dotenvx.sh | sh
◈ installed (dotenvx)

more install options

2. Add your secrets

Add a secret to your .env file.

$ echo "HELLO=World" > .env

3. Run Codex with redaction

Run Codex with your real secrets while redacting them from its output.

$ dotenvx run --redact -- codex exec 'Run `dotenvx get HELLO` and echo back just Hello VALUE' --skip-git-repo-check
Hello [REDACTED]