Lockpick is a tool designed to use with concourse to pull git-crypt key from Vault.
It shall be using App ID backend to store key and lockpick will aid in retrieving key from Vault.
By default the key is assume to be in ~/.lockpick
. This can be overwritten with LOCKPICK_CONF
app_id: foobar
user_id: myuserid
key: mykeyid
output_file: ~/mygitcrypt.key
vault_address: "https://127.0.0.1:8200"
The key need to be base64 before putting into vault.