Skip to content

Support passing secrets via STDIN args instead of environment

Compare
Choose a tag to compare
@narenaryan narenaryan released this 04 Nov 02:08
· 32 commits to main since this release
3c4ff79

Features

  • New no_env configuration key to control mode of secret sharing
  • Backwards compatible

This release consists of a new feature to avoid passing secrets as environment variables but command args. This is secure way to collect secrets instead of causing environment pollution.

env_file: .env
secret_name:  <your_secret>
vault: aws
no_env: true # New key to control no environment vs command args. Default: false

This also lets Whispr hand-off secrets to subprocess and not own anything.