The Standalone ESC CLI Retired: Use pulumi env
The standalone esc CLI is archived as of v0.26.0. Every ESC command is available in the Pulumi CLI under pulumi env: one binary to install and upgrade.

2 authors

The standalone esc CLI is archived as of v0.26.0. Every ESC command is available in the Pulumi CLI under pulumi env: one binary to install and upgrade.

2 authors

Learn how Pulumi eliminated static CI secrets across 70+ repos using Pulumi ESC and OIDC, reducing supply chain attack risk with short-lived credentials.
Boris Schlosser

Deploy on every push, preview infrastructure on pull requests, and let Neo explain changes, all from Pulumi Cloud, regardless of where your code lives.



4 authors

The Pulumi CLI now supports native OIDC token exchange, enabling secure authentication without long-lived credentials in automated workflows.
Boris Schlosser
Compare secrets management tools and find the best solution for your infrastructure with expert analysis and recommendations.

2 authors
You can Bring Your Own Keys (BYOK) to encrypt secrets on Pulumi ESC.

2 authors
Pulumi ESC adds Infisical providers for dynamic OIDC login and centralized secret fetching, enhancing security and simplifying management.

2 authors