Release Notes
Added
- Profile-level default configuration:
profiles.<name>.defaults section for shared settings across secrets in a profile
- Default providers for profiles: define common providers once and have all secrets use them unless overridden
- Default values and required settings can now be specified at profile level to reduce repetition
as_path option for secrets: write secret values to temporary files and return the file path instead of the value. Temporary files are automatically cleaned up when the resolved secrets are dropped in Rust SDK usage. For CLI commands (get and check), temporary files are persisted and NOT deleted after the command exits. In the Rust SDK, fields with as_path = true are generated as PathBuf or Option<PathBuf> instead of String
Changed
- Secret
required field is now Option<bool> to allow profile-level defaults to apply when not explicitly set
- Secret
default field can now inherit from profile-level defaults if not specified per-secret
- Secret
providers field can now inherit from profile-level defaults if not specified per-secret
- Profile defaults only apply to secrets that don't explicitly set these fields
Install secretspec 0.4.0
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/cachix/secretspec/releases/download/v0.4.0/secretspec-installer.sh | sh
Download secretspec 0.4.0
