Skip to content
SHC Docs

shc vault ls

list secrets

List the secrets visible at the current scope. With -s the listing targets that stack (environment defaults to “default” so deployment-scoped autogenerated secrets are included). -k filters by key substring, —scope narrows to a single scope tier, and —verbose adds the stack and environment columns. Page long results with —limit/—offset.

shc vault ls [flags]
shc vault ls
shc vault ls -s myblog --verbose
shc vault ls -k password --scope deployment
shc vault ls --limit 200 --offset 200
-e, --environment string environment name
-h, --help help for ls
-k, --key string filter by key substring
--limit int maximum number of rows (0 = all)
--offset int skip the first N rows
--scope string filter by scope (system|tenant|stack|environment|deployment)
-s, --stack string stack name
-v, --verbose show stack/environment columns
--config stringArray extra YAML config file to layer on top of auto-discovered config; repeatable, later files win
-d, --debug enable debug mode (default: $SHC_DEBUG)
--exclude string comma-separated dotted paths to drop
--fields string comma-separated columns/keys to show (and their order)
--filter string comma-separated dotted paths to keep (drops everything else)
-o, --output string output format: tty|text|json|yaml (default: $SHC_OUTPUT)
-p, --password string vault password
-t, --tenant string tenant name (default: $SHC_TENANT)