Live data from Hacker News

Show HN: Go-keyconfig – Store config files in OS-provided secret mgmt

github.com

1–4 of 4 posts

Re: Show HN: Go-keyconfig – Store config files in OS-provided secret mgmt

#2
I developed go-keyconfig after realizing that almost every CLI that I use on a daily basis that requires authentication of some kind drops the secrets in a local filesystem config file in plain-text. As one could imagine, this is ripe for an accidental git commit or easy reading from an attacker.

Every OS comes with a secrets manager of some kind... MacOS has OSX Keychain, Linux has GNOME Keyring, KWallet, and secret-service, even Windows has Credential Manager.

This module is designed to help developers creating apps or CLIs needing to store configuration values in config files a secure means of doing so. It supports All the secret managers mentioned above.

I would love to hear everyone's feedback and thoughts!

Re: Show HN: Go-keyconfig – Store config files in OS-provided secret mgmt

#3

I developed go-keyconfig after realizing that almost every CLI that I use on a daily basis that requires authentication of some kind drops the secrets in a local filesystem config file in plain-text. As one could imagine, this is ripe for an accidental git commit or easy reading from an attacker. Every OS comes with a secrets manager of some kind... MacOS has OSX Keychain, Linux has GNOME Keyring, KWallet, and secret…

This is awesome! Much appreciated.

Re: Show HN: Go-keyconfig – Store config files in OS-provided secret mgmt

#4

I developed go-keyconfig after realizing that almost every CLI that I use on a daily basis that requires authentication of some kind drops the secrets in a local filesystem config file in plain-text. As one could imagine, this is ripe for an accidental git commit or easy reading from an attacker. Every OS comes with a secrets manager of some kind... MacOS has OSX Keychain, Linux has GNOME Keyring, KWallet, and secret…

Great project! Thank you!