pikopod.yaml. None of them is ever accepted as a command-line argument, because argv is visible to every user on the machine.
Runtime
Model key
The key is resolved once, in this order:
llm.api_key in the file, then PIKOPOD_LLM_KEY, then the standard variable of the provider named in llm.provider. A key stored in the file requires the file to be mode 0600. A key in the environment does not.
The key is optional and only three features use it: scenario create, fix, and a documentation-URL import that could not find a spec any other way. See Configuration.
Webhook signing
The key is never written to disk.
Forge credentials
Read bypikopod pr comment, pikopod pr open and pikopod fix --pr.
CI detection
Platform, repository, pull request number and head SHA default from the CI environment, sopr comment needs no flags inside a pipeline.
Pass
--platform, --repo, --number, --sha and --api to override any of them outside CI.