For example, decrypting .env.gpg in CI pipeline in a bare minimal shell.

gpg --pinentry-mode=loopback --passphrase $GPG_PASSPHRASE -q --batch --yes --output .env .env.gpg