"Inline secret values are not supported" but how to specify the host environment variable along with the allowed host?

[cboct]

After upgrading to msb 0.6.4, I cannot use --secret SECRET=$ENV_VAR@HOST anymore. The error message says:

error: inline secret values (COPILOT_GITHUB_TOKEN=VALUE@HOST) are not supported by create: the value would be stored in the sandbox config at rest. Export the value as a host environment variable and reference it with COPILOT_GITHUB_TOKEN@HOST instead, which is resolved from the environment at start time.

So I tried --secret SECRET=ENV_VAR@HOST (no $) and --secret SECRET=\$ENV_VAR@HOST (escaped $) to try passing the env var's name instead of the content, but both attempts fail with the same error as above.

The CLI docs don't shed any light on the expected syntax. How do I specify secrets on the command line in 0.6.4+?

[cboct]

Just after posting the question, another variant popped into my mind to try:

--secret ENV_VAR@HOST

This syntax works.

(msb team, please update the docs accordingly, thank you!)

[toksdotdev]

thanks for raising the issue. yes, we did change this recently. it wasn't reflected yet in the docs because #1116 hadn't been merged yet. the docs should already reflect this new behaviour. thanks!