{"id":17217052,"url":"https://github.com/akhenakh/safepassage","last_synced_at":"2025-07-06T17:07:06.384Z","repository":{"id":54557239,"uuid":"276714985","full_name":"akhenakh/safepassage","owner":"akhenakh","description":"A Drone plugin to safely extract secrets","archived":false,"fork":false,"pushed_at":"2022-02-06T00:55:57.000Z","size":33,"stargazers_count":2,"open_issues_count":0,"forks_count":1,"subscribers_count":2,"default_branch":"master","last_synced_at":"2025-07-06T17:07:01.554Z","etag":null,"topics":["drone","drone-ci","drone-plugin","pgp"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/akhenakh.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2020-07-02T18:07:15.000Z","updated_at":"2023-05-01T00:43:27.000Z","dependencies_parsed_at":"2022-08-13T19:31:37.379Z","dependency_job_id":null,"html_url":"https://github.com/akhenakh/safepassage","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/akhenakh/safepassage","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/akhenakh%2Fsafepassage","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/akhenakh%2Fsafepassage/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/akhenakh%2Fsafepassage/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/akhenakh%2Fsafepassage/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/akhenakh","download_url":"https://codeload.github.com/akhenakh/safepassage/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/akhenakh%2Fsafepassage/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":263940284,"owners_count":23533010,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["drone","drone-ci","drone-plugin","pgp"],"created_at":"2024-10-15T03:43:09.633Z","updated_at":"2025-07-06T17:07:06.362Z","avatar_url":"https://github.com/akhenakh.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# safepassage\nA Drone plugin to safely extract secrets.\n\n## Disclaimer\nThis is not a nice solution for your lack of discipline, your secrets should be stored elsewhere.  \nWhen recovered please rotate your secret.\n\n## How to use safepassage\nsafepassage is a simple plugins that will export your secret into an OpenPGP encrypted message.\n\nProvide your pubkey, create a temporary branch change the `.drone.yml` using the following example and commit to trigger a build.  \nSecrets can be passed by environment or by settings.\n\nYou can also specify a \"format\" setting. Accepted values are `std` or `env` (which base64 encodes the values and presents them in an env-file format). The default is `std`.\n\n```yaml\nkind: pipeline\n\nsteps:\n- name: extractor\n  image: akhenakh/safepassage:1.1\n  environment:\n    my_secret:\n      from_secret: my_drone_secret\n  settings:\n    another_secret:\n      from_secret: my_other_drone_secret\n    secrets:\n      - MY_SECRET\n      - ANOTHER_SECRET\n    pubkey: |\n      -----BEGIN PGP PUBLIC KEY BLOCK-----\n      ....\n      -----END PGP PUBLIC KEY BLOCK-----\n```\n\n## Details\nsafepassage is a simple Go binary build into a Distroless Docker image, it used [GopenPGP](https://gopenpgp.org/) implementation.\n\n## Background\n```shell script\nMY_SECRET=hello \u0026\u0026 ./safepassage -secrets=MY_SECRET -pubKey=\"$(cat testdata/pubkey.asc)\"      \n```\n\nEnv are prefixed by `PLUGIN_`.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fakhenakh%2Fsafepassage","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fakhenakh%2Fsafepassage","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fakhenakh%2Fsafepassage/lists"}