Secrets.env

Latest version: v0.29.1

Safety actively analyzes 641134 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

0.29.1

✨ Enhancements

* Vault provider now integrates with Vault's [token helper]

[token helper]: https://www.vaultproject.io/docs/commands/token-helper

* Shifted some alerts to the [warnings] module to minimize the warning notifications displayed to the user.

[warnings]: https://docs.python.org/3/library/warnings.html

0.29

Changes made prior to version 0.29 of secrets.env are not documented.

0.29.0

🚨 Breaking changes

* Vault userpass auth adapter got renamed from `basic` to `userpass`.

This change is to align the naming with the Vault's auth method.

* Vault token auth adapter no longer reads token from keyring.

Vault only provide short-lived tokens, so it is not practical to store them in keyring.

✨ Enhancements

* The secrets section in the config file now supports list as well as dictionary.

yaml
secrets:
- name: secret1
source: vault
path: secret/sample
field: token
- name: secret2
source: plaintext
value: example


* Deprecate the `teleport+vault` keyword

This keyword was used to configure the Teleport-integrated Vault secret provider.
It is now covered by `vault`.

* Command `keyring set` now accepts password from stdin

🚧 Internal changes

* Revise the documentation to ensure consistency across different providers.
* Refactor the configuration parser. Internally switch from using `dict` to [Pydantic](https://docs.pydantic.dev/latest/) models.
* Refactor layout of the adapter classes to make the code more extensible.

Links

Releases

Has known vulnerabilities

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.