{
  "slug": "bk-secret-create-accepts-file-or-stdin-values-c3daf88e763c",
  "title": "bk secret create accepts file or stdin values",
  "tools": [
    "bk"
  ],
  "tags": [
    "agent"
  ],
  "introduced_at": "2026-08-26T01:22:38.000Z",
  "announced_at": "2026-08-26T01:22:38.000Z",
  "effective_at": null,
  "date_basis": "source-publication",
  "status": "unknown",
  "how": {
    "incantation": "When automation needs a multiline secret value, use `--value-file <path>` or pipe the value to `bk secret create` with `--value-file -`. For stdin, include `--no-input`; do not combine `--value` and `--value-file`.",
    "examples": [
      "bk secret create --cluster-uuid <cluster-uuid> --key <key> --value-file <path>",
      "printf 'line one\\nline two\\n' | bk secret create --no-input --cluster-uuid <cluster-uuid> --key <key> --value-file -"
    ],
    "gotchas": [
      "Version: v3.55.1",
      "--cluster-uuid <cluster-uuid> (required): UUID of the cluster.",
      "--key <key> (required): Secret key name.",
      "--value-file <path>: Read the secret value from a file; use `-` for stdin. Content is preserved exactly. Mutually exclusive with `--value` per the release note.",
      "--no-input: Used with `--value-file -` in the documented stdin example; the reference does not list its behavior among the command flags.",
      "--value <value>: Provide the secret value inline; if neither value source is provided, the command prompts for it. Mutually exclusive with `--value-file` per the release note.",
      "`--value` and `--value-file` are mutually exclusive.",
      "File and stdin content is preserved exactly, including trailing LF or CRLF.",
      "Empty and invalid UTF-8 file or stdin values are rejected.",
      "Inline and interactive behavior is preserved."
    ]
  },
  "why_it_matters": "Create a secret with a multiline value in automation without placing the value inline in shell history.",
  "before": "The value was supplied inline or entered interactively.",
  "sources": [
    "https://github.com/buildkite/cli/releases/tag/v3.55.1",
    "https://github.com/buildkite/cli/pull/960",
    "https://buildkite.com/docs/platform/cli/reference/secret"
  ],
  "rank": 0.98041,
  "judge": {
    "publish": true,
    "judge_model": "codex-cli/gpt-6-luna+typesafe/jev-1.13.0",
    "prompt_version": "extract-v7+enrich-v2+judge-v2x3+jev-publish-v1"
  },
  "review_state": "approved",
  "provenance": {
    "run_id": "wave2b-20261017",
    "verdict_id": "wave2b-20261017:wave2b-20261017-b967213ffe7752ac-2:gate",
    "evidence_hash": "832e815541f52b1c6086bf2d613662103fc38602e3e272af452c952cbb4f0e4f"
  },
  "review": {
    "draft_hash": "b8679037d9614944c349e4bc7d3ed094626f327886dc505101fe5f0fe5823f3f",
    "reviewer": "publication-gate",
    "reviewed_at": "2026-10-07T00:00:00.000Z",
    "decision": "wave2b-20261017:gate",
    "reason": "3 of 3 judge runs approved with p_yes >= 0.9 (mean 0.98 >= 0.9; 2 needed) and Jev gave 0.84 (>= 0.6 needed)."
  }
}