SecretSpec 0.19: Moving and importing secrets between providers

Hey all,

secretspec 0.19 is out with highlights:

  • Provider-specific storage layouts: map one application variable to each
    provider’s native item, field, vault, or path.
  • Safer imports: preflight every source and destination, verify copied values, and
    only then delete the source.
  • Value transforms: decode Base64 or hexadecimal values and extract fields from
    JSON documents.
  • Config in secrets: resolve committed, profile-specific configuration alongside
    provider-backed secrets.
  • Ephemeral values and runtime prompts: generate or securely request values that
    should exist for only one invocation.
  • Passbolt support: read and write secrets in self-hosted Passbolt servers.
  • Faster remote providers: attach local caches directly to authoritative providers
    and batch 1Password field reads.

Read the full release post:

SecretSpec 0.19: Moving and importing secrets between providers | SecretSpec

Disclaimer: LLMs have been used

4 Likes