Joseph O'Brien
1359def673
Some checks failed
Public Repo Readiness / Check Public Repo Readiness (push) Has been cancelled
Add a config-driven, strongly-typed secret/env resolution system to notsecrets with 11 provider backends. The system supports explicit key bindings with typed SecretRef enums and a priority chain fallback. Tier 1 providers (implemented): Env, 1Password, dotenvx, SOPS, GSM Tier 2 providers (stubbed): nuenv, direnv, mise, Bitwarden, Vault, dotenvy New types: Provider, ProviderConfig, SecretRef, SecretsConfig, SecretsError, SecretSource, EnumerableSecretSource, SecretResolver Config lives in notsecrets.toml with typed serde deserialization. ISP split: EnumerableSecretSource for backends that support bulk enumeration, SecretSource for single-key lookup only. Includes conformance test suite, 33 new tests (161 workspace total). notstrap EnvInjector migration deferred to follow-up.
36 lines
952 B
TOML
36 lines
952 B
TOML
[package]
|
|
name = "notsecrets"
|
|
version = "0.1.0"
|
|
edition = "2024"
|
|
license.workspace = true
|
|
|
|
[dependencies]
|
|
notcore = { workspace = true }
|
|
anyhow = { workspace = true }
|
|
thiserror = { workspace = true }
|
|
rpassword = { workspace = true }
|
|
dirs = { workspace = true }
|
|
serde = { workspace = true }
|
|
toml = { workspace = true }
|
|
x25519-dalek = { version = "2", features = ["static_secrets"] }
|
|
ed25519-dalek = "2"
|
|
rsa = { version = "0.9", features = ["sha2"] }
|
|
sha2 = "0.10"
|
|
hkdf = "0.12"
|
|
chacha20poly1305 = "0.10"
|
|
scrypt = "0.11"
|
|
bech32 = "0.11"
|
|
base64 = "0.22"
|
|
hmac = "0.12"
|
|
rand = "0.8"
|
|
zeroize = "1"
|
|
curve25519-dalek = "4"
|
|
yubikey = { version = "0.8", optional = true }
|
|
|
|
[features]
|
|
default = []
|
|
yubikey = ["dep:yubikey"]
|
|
|
|
[dev-dependencies]
|
|
tempfile = { workspace = true }
|