v0.0.2

Release v0.0.2

Overview

SATO - Secure Access Task Operator

Secure secret injection for Docker Compose workflows with KeePass integration.

---

Changes:

Improved:

• build of all packages (bin/.deb/.rpm) at once: create.sh all;
• checking of Go syntax (gofmt,go vet). If files need formatting - warning will appear, otherwise - just information.
• new tests added and code refactored
• README.md files updated
• Database "Mode" displaying - a new column "Mode" added in the table instead of the status at the right of DB name:
  If no DB is found, the Mode column is hidden to keep the output simple.

  [Now]                                                        [Before]
  ...                                                          ...
  Priority | Path           | Status    | Mode                 Priority | Path           | Status
  ---------|----------------|-----------|------                ---------|----------------|-----------
   1       | --db-path      | not set   |                       1       | --db-path      | not set
   2       | ~/.sato/*.kdbx | not found |                       2       | ~/.sato/*.kdbx | not found
  [3]      | SATO_DB_PATH   | set       | RW                   [3]      | SATO_DB_PATH   | set

  Database: /home/user/.sato/secrets.kdbx                      Database: /home/user/.sato/secrets.kdbx [RW]
  ...                                                          ...

• Version of docker compose moved from sato to sato version

Fixed:

• download links fixed;
• .rpm package build fixed - deletion of temporary folder fixed;
• some other small issues;

---

Test results:

Area	Result	Details
Preflight	PASS	gofmt, go mod tidy, go vet, go test ./...
Unit tests	PASS	19 passed, coverage 19.0%
E2E tests	PASS	9 passed, 0 failed, 0 skipped
Binary	PASS	dist/sato, size 3.0M, commit 2b9414d
Final status	PASS	All test suites completed successfully

---

Quick Usage

• Show status

  sato

• Run docker compose with secrets

  sato docker compose up -d

• Use specific DB

  sato --db-path=/path/to/secrets.kdbx docker compose up -d

---

Installation

1. Prerequisites

• required:
  • OS Linux
  • docker compose - to have ability to use sato
• optional:
  • git - for cloning repository
  • docker - for manual binary building
  • keepassxc - to edit secrets via UI

2. Obtain files from Github Releases (or build manually):

• binary file:

  wget https://github.com/Marcus-Aprelius/sato/releases/latest/download/sato

• .deb package:

  wget https://github.com/Marcus-Aprelius/sato/releases/download/v0.0.2/sato_0.0.2_amd64.deb

• .rpm package:

  wget https://github.com/Marcus-Aprelius/sato/releases/download/v0.0.2/sato-0.0.2-1.x86_64.rpm

3. Install sato:

• from binary file:

  chmod +x sato && sudo mv sato /usr/local/bin/

• from .deb package:

  sudo dpkg -i sato_0.0.2_amd64.deb

• from .rpm package:

  sudo yum install -y sato-0.0.2-1.x86_64.rpm

© 2026 Marcus-Aprelius

Apache License 2.0

v0.0.1

Release v0.0.1

Notes

Initial release of sato - Secure Access Task Operator. A lightweight utility for injecting KeePass secrets into Docker Compose without .env files.

---

Overview

Secure secret injection for Docker Compose workflows with KeePass integration.

---

Features

• ✅ KeePass integration (read .kdbx files)
• ✅ Docker Compose command execution
• ✅ Strict command allow-list (docker compose only)
• ✅ DB auto-discovery (--db-path, ~/.sato/, SATO_DB_PATH)
• ✅ Interactive & piped password input
• ✅ Static binary (~3MB)
• ✅ No .env files
• ✅ Secrets isolated to child processes only
• ✅ Bash completion
• ✅ Recursive KeePass group reading
• ✅ Secret tree view (sato get secrets --tree)
• ✅ Optional empty group display (--show-empty-groups)
• ✅ Unit and E2E test reports

---

Quick Usage

# Show status
sato

# Run docker compose with secrets
sato docker compose up -d

# Use specific DB
sato --db-path=/path/to/secrets.kdbx docker compose up -d

---

Install

bash scripts/build/create.sh bin

---

Test

cd playground
echo "sato" | ../dist/sato --db-path=secrets.kdbx docker compose config

---

© 2026 Marcus-Aprelius

Apache License 2.0