Module run 

envvault run — inject secrets into a child process.

Functions

execute

Execute the run command.

filter_secrets

Filter secrets by only/exclude lists. Used for testing.

redact_line

Replace any occurrence of secret values in a line with [REDACTED].

validate_allowed_command

Validate that a command is in the allowed list.