Secret placeholder

[jingkaihe]

#89

--secret-placeholder cli flag based placeholder

./bin/matchlock run -it --rm --image ubuntu:24.04 \
  --allow-host '*' \
  --secret GH_TOKEN@github.com,api.github.com \
  --secret-placeholder GH_TOKEN=gho_sandbox_placeholder  \
   --

secret file based secret placeholder:

secrets.json

{
  "GH_TOKEN": {
    "value": "gho_xxxxxxxxx_therealone",
    "placeholder": "gho_sandbox_placeholder",
    "hosts": ["github.com", "api.github.com"]
  }
}

./bin/matchlock run --rm -it --image ubuntu:24.04 --allow-host '*' --secret-file secrets.json --