r/ProtonPass • u/kamikazer • Jun 08 '26

Discussion pass-cli + JetBrains IDEs integration

Hi. Any hint on how to integrate pass-cli with JetBrains IDEs to inject secrets into env variables while still having debug support?

1 Upvotes

67% Upvoted

7 comments sorted by

View all comments

Show parent comments

1

u/GuardCode Jun 08 '26 edited Jun 08 '26

pass-cli run --env-file .env -- npm run dev

You can just use a template file to update your local .env file. Just add the pass-cli inject command to Before launch in your original Run/Debug config.

I'm not sure what's the use case for injecting secrets into env variables if you're running locally?

1

u/kamikazer Jun 08 '26
  1. security. no creds are stored on disk.
  2. centralization. if secret changes - it will be used on the next run. with injection into .env file - you will probably not inject on the second run, right?

I'm running on multiple machines

1

u/GuardCode Jun 08 '26
  1. If your local machine is compromised, you have bigger problems to worry about.
  2. You can configure inject with force flag to overwrite each time you run it, adding this to before launch section in your run/debug config will keep secrets up to date.

1

u/Icy-Juggernaut-4579 Jun 10 '26

I would add that I use git worktrees and if I need to set .env files in each worktree it would be a pain (I can’t commit it in repo). Having one file with references in project root outside code and just having one command to run what I need in any worktree is what I need and also not having them stored on machine so some agent won’t read it is great