Run drush on Pantheon sites with terminus.
Get a "Machine token" from Pantheon as per the documentation, it will look something like abc123abc123abc123abc123abc123abc123abc123.
Make sure at least one of your public-private ssh key pairs used on Pantheon does not have a password.
TOKEN=abc123abc123abc123abc123abc123abc123abc123
SSHKEYNOPASS=id_rsa
docker run --rm \
-v "$HOME"/.ssh:/root/.ssh \
-e PANTHEON_TOKEN="$TOKEN" \
-e SSHKEYNOPASS=id_rsa \
dcycle/terminus:2 site:list
MYSITE=my-website
docker run --rm \
-v "$HOME"/.ssh:/root/.ssh \
-e PANTHEON_TOKEN="$TOKEN" \
-e SSHKEYNOPASS=id_rsa \
dcycle/terminus:2 "drush $MYSITE.dev pml"