7 comments

  • moontear 20 hours ago
    I thought SOPS with age is what we were doing now. Do we need yet another tooling?

    https://github.com/getsops/sops

    • patabyte 20 hours ago
      SOPS with Age is simple, and simple is good. I strongly recommend this approach.
      • sam_lowry_ 20 hours ago
        SOPS is simple? You are kidding me. Pass from https://www.passwordstore.org/ fame is simple. SOPS is ultra-complicated for a security tool.
        • sevg 20 hours ago
          I dunno, it seems mostly simple to me.

          You have a .sops.yaml with some Age public keys, and then you run “sops secrets.yml” to create an encrypted file.

        • jmholla 18 hours ago
          Can you explain what you find complicated about sops? I've used it with ease for the last two years, both personally and professionally.
    • oulipo2 17 hours ago
  • ComputerGuru 20 hours ago
    Possibly of interest to readers (but not directly competing) is securestore, our open-source, open-protocol, cross-language framework (cli tool + libraries) for securely storing secrets and programmatically retrieving them in production: https://neosmart.net/blog/securestore-open-secrets-format/

    donet version: https://github.com/neosmart/SecureStore

    rust version: https://github.com/neosmart/securestore-rs

    (This one is production ready)

  • Arrowmaster 6 hours ago
    The latest release was June 2022 and the last non dependabot commit was March 2023, until new activity 4 days ago using AI. Why should anyone use this?
  • johng 21 hours ago
    Looks like every other CLI manager I've ever seen. It says not ready for production use. What's different for this than the others?
  • microheart 16 hours ago
    I wonder what does the solution do differently than the rest of the CLI managers?
  • opan 21 hours ago
    Dangerously close to "scrot" which is both an X11 screenshot tool and general slang for a screenshot.
    • voidfunc 20 hours ago
      Ive been working with Linux for 25ish years and have never heard of scrot. I think there's low probability of confusion lol.
      • imcritic 16 hours ago
        Same. First time hearing about scrot.
  • oulipo2 17 hours ago
    How does it compare to https://github.com/jdx/fnox