#shell_environment_policy

Keep API keys out of the commands Codex runs: the shell_environment_policy setting

Control which environment variables reach the commands Codex CLI runs with shell_environment_policy: inherit values, default handling of KEY/SECRET/TOKEN names, filters, and set.