Add option to prompt and mask value when using --secret for pulumi env

[desteves]

Hello!

• Vote on this issue by adding a 👍 reaction
• If you want to implement this feature, comment to let us know (we'll work with you on design, scheduling, etc.)

Issue details

pulumi env set test key --secret expects the secret value to be passed as an argument. This is not optimal, as it's saved in the terminal history as plain-text, etc. Instead, consider adding a prompt/mask experience similar to that of pulumi config set key --secret.

Affected area/feature

[tgummerer]

Thanks for the suggestion, this sounds like a good idea indeed! I'm going to transfer this over to the pulumi/esc repo, as the underlying command lives there.

[cleverguy25]

Added to epic https://github.com/pulumi/pulumi-service/issues/18145