CLI Reference

The HighSubmit Command-Line Interface (`hs`) is the primary interface for managing secrets, creating temporary JIT access keys, and rotating configurations.

hs login

Authenticates your local terminal context against your mapped SSO identity provider.

# Start authentication flow

$ hs login --org keni-technologies

hs session request

Requests a short-lived, scoped session credentials access window.

# Request JIT access key for database secrets for 15 minutes

$ hs session request --scope production-db --duration 15m

hs vault rotate

Manually rotates active keys and triggers downstream integration hooks.

# Rotate PostgreSQL password variable

$ hs vault rotate --key pg-db-pass