Release Notes
Added
- Declarative secret generation: secrets can now be auto-generated when missing by adding
type and generate fields to secret config. Supported types: password, hex, base64,
uuid, and command (for arbitrary shell commands). Generation triggers during check/run
when a secret is missing, and the generated value is stored via the configured provider.
Changed
- OnePassword provider: Significant performance improvement by caching authentication status
and using batch fetching with parallel threads. Reduces CLI calls from 2N sequential to
~2 sequential + N parallel for N secrets.
Install secretspec 0.7.0
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/cachix/secretspec/releases/download/v0.7.0/secretspec-installer.sh | sh
Download secretspec 0.7.0
