v0.1.0

caws v0.1.0

A lightweight, self-contained AWS credential manager with password-based encryption.

Installation

Download the appropriate binary for your platform below, then:

# Linux/macOS
chmod +x caws-*
sudo mv caws-* /usr/local/bin/caws

# Verify installation
caws --help

Checksums

Verify your download using the checksums.txt file:

sha256sum -c checksums.txt --ignore-missing

Changelog

Other Changes

• 594932b: Add AWS Console login via federation tokens with credential type isolation (Tim Lieberman tim@timdev.com)
• e48b2e9: Add Docker sandbox infrastructure and reorganize documentation (Tim Lieberman tim@timdev.com)
• 3e52d70: Add E2E test suite with mock and real AWS modes (Tim Lieberman tim@timdev.com)
• cf6bc5d: Add GitHub Actions for CI and releases (Tim Lieberman tim@timdev.com)
• 01a4baa: Add comprehensive unit test coverage for crypto, validation, and config modules (Tim Lieberman tim@timdev.com)
• 1faa618: Add mock STS support for credential-free testing (Tim Lieberman tim@timdev.com)
• e88a151: Add test mode support via environment variables (Tim Lieberman tim@timdev.com)
• c08f903: Add vault file locking to prevent concurrent corruption (Tim Lieberman tim@timdev.com)
• f46b240: Adopt XDG Base Directory Specification for file storage (Tim Lieberman tim@timdev.com)
• 212d1c0: Back entire homedir with a docker volume to perstist .claude.json stuff across container restarts (Tim Lieberman tim@timdev.com)
• 3b59659: Clean up Justfile (Tim Lieberman tim@timdev.com)
• 5136a25: Clear password bytes from memory after use (Tim Lieberman tim@timdev.com)
• ee1d4c7: Initial bitwarden-based pass (Tim Lieberman tim@timdev.com)
• a115130: Pivot again: pure go. No gopass/gpg needed. Basic, but promising (Tim Lieberman tim@timdev.com)
• 13fd571: Refactor CLI to use idiomatic Go patterns and improve security (Tim Lieberman tim@timdev.com)
• 9f2768e: Replace AWS CLI with AWS SDK for Go v2 (Tim Lieberman tim@timdev.com)
• 9bb31a8: Replace Bitwarden backend with gopass library: (Tim Lieberman tim@timdev.com)
• af1a45e: Replace bash e2e tests with native Go test suite (Tim Lieberman tim@timdev.com)
• e4b4f83: Replace vault storage with ~/.aws/config for region/MFA settings (Tim Lieberman tim@timdev.com)
• c362c96: Sorry, Windows people. (Tim Lieberman tim@timdev.com)
• c842a5a: Tweak sandbox support config (Tim Lieberman tim@timdev.com)
• be297f1: Update README (Tim Lieberman tim@timdev.com)
• e799bfd: gofmt (Tim Lieberman tim@timdev.com)

---

Full Changelog: ...v0.1.0

What's caws?

caws is a fast, local-first alternative to aws-vault with zero external dependencies. Store your AWS credentials securely with password-based encryption (Argon2id + AES-256-GCM).

Learn more: https://github.com/timdev/caws