Skip to main content
Infisical

​
Features

  • Works out of the box in Tembo sandboxes (Infisical CLI is already installed)
  • Injects secrets at runtime without committing .env files
  • Supports optional env var overrides for project/environment/path/domain defaults

​
Installation

1

Open Sandbox settings

In Tembo, go to Settings -> Sandbox.
2

Add environment variable

Add INFISICAL_TOKEN to your sandbox environment variables and save.
3

Start a new session

Start a new Tembo session. That’s it.

​
Usage

In Tembo sandbox sessions, this will automatically work once INFISICAL_TOKEN is set. Run commands with infisical run --:
If your script cannot infer the Infisical project automatically, add --projectId before the command separator:

​
Optional overrides

If you want to override defaults for infisical run, add these in Settings -> Sandbox:
  • INFISICAL_PROJECT_ID
  • INFISICAL_ENV
  • INFISICAL_SECRET_PATH
  • INFISICAL_API_URL
Explicit CLI flags still win over env-var defaults.