i hear we're all using

local.Command

now instead of writing dynamic providers. is there a way to ignore an environment variable that changes? its an encrypted value so it changes on each run as a workaround im thinking of maybe using 2

local.Command

resources where the first would run

openssl enc

- that would leverage the state to keep the encrypted value stable

Would this work? https://www.pulumi.com/docs/iac/concepts/options/ignorechanges/

love it! will give it a try, although not 100% confident it will work for a nested input, eg.

input.env.IGNORE_JUST_THIS