{"id":38049977,"url":"https://github.com/flowexec/vault","last_synced_at":"2026-01-16T20:03:55.576Z","repository":{"id":301276224,"uuid":"993523305","full_name":"flowexec/vault","owner":"flowexec","description":"A Go package for secure secret storage with multiple encryption backends","archived":false,"fork":false,"pushed_at":"2025-08-11T01:51:46.000Z","size":92,"stargazers_count":0,"open_issues_count":1,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2025-08-11T03:20:23.549Z","etag":null,"topics":["go","secrets-management"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/flowexec.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2025-05-31T00:15:08.000Z","updated_at":"2025-08-11T01:49:37.000Z","dependencies_parsed_at":"2025-07-08T17:39:26.547Z","dependency_job_id":"485d023a-55cd-4e61-90aa-fa154b851a0e","html_url":"https://github.com/flowexec/vault","commit_stats":null,"previous_names":["jahvon/vault","flowexec/vault"],"tags_count":5,"template":false,"template_full_name":null,"purl":"pkg:github/flowexec/vault","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/flowexec%2Fvault","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/flowexec%2Fvault/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/flowexec%2Fvault/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/flowexec%2Fvault/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/flowexec","download_url":"https://codeload.github.com/flowexec/vault/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/flowexec%2Fvault/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28482250,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-16T11:59:17.896Z","status":"ssl_error","status_checked_at":"2026-01-16T11:55:55.838Z","response_time":107,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["go","secrets-management"],"created_at":"2026-01-16T20:03:54.933Z","updated_at":"2026-01-16T20:03:55.568Z","avatar_url":"https://github.com/flowexec.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Vault\n\n\u003cp\u003e\n    \u003ca href=\"https://img.shields.io/github/v/release/flowexec/vault\"\u003e\u003cimg src=\"https://img.shields.io/github/v/release/flowexec/vault\" alt=\"GitHub release\"\u003e\u003c/a\u003e\n    \u003ca href=\"https://pkg.go.dev/github.com/flowexec/vault\"\u003e\u003cimg src=\"https://pkg.go.dev/badge/github.com/flowexec/vault.svg\" alt=\"Go Reference\"\u003e\u003c/a\u003e\n\u003c/p\u003e\n\nA flexible Go library for secure secret management with multiple backend providers. Made for [flow](https://github.com/jahvon/flow) but can be used independently.\n\n## Features\n\n- **Multiple Provider Support**: Choose from local encrypted storage, system keyring, or external CLI tools\n- **Pluggable Architecture**: Easy to extend with custom providers\n- **Type Safety**: Strong typing for secrets with secure memory handling\n- **Thread Safe**: Concurrent access protection with read/write mutexes\n- **Comprehensive API**: Full CRUD operations plus metadata and existence checks\n\n## Quick Start\n\n```go\npackage main\n\nimport (\n    \"fmt\"\n    \"github.com/flowexec/vault\"\n)\n\nfunc main() {\n    // Create a new AES vault\n    v, err := vault.New(\"my-vault\",\n        vault.WithProvider(vault.ProviderTypeAES256),\n        vault.WithLocalPath(\"/path/to/vault/storage\"),\n        vault.WithAESKeyFromEnv(\"VAULT_KEY\"),\n    )\n    if err != nil {\n        panic(err)\n    }\n    defer v.Close()\n\n    // Store a secret\n    secret := vault.NewSecretValue([]byte(\"my-secret-value\"))\n    err = v.SetSecret(\"api-key\", secret)\n    if err != nil {\n        panic(err)\n    }\n\n    // Retrieve a secret\n    retrieved, err := v.GetSecret(\"api-key\")\n    if err != nil {\n        panic(err)\n    }\n    fmt.Println(\"Secret:\", retrieved.PlainTextString())\n}\n```\n\n## Provider Types\n\n### Local Encrypted Providers\n\n#### AES256 Provider\nStores secrets in an AES-256 encrypted file with configurable key sources.\n\n```go\nprovider, _, err := vault.New(\"my-vault\",\n    vault.WithProvider(vault.ProviderTypeAES256),\n    vault.WithAESPath(\"~/secrets.vault\"),\n)\n```\n\n**Key Generation:**\n```go\nkey, err := vault.GenerateEncryptionKey()\n// Store this key securely (environment variable, HSM, etc.)\n```\n\n#### Age Provider\nUses the [age encryption tool](https://age-encryption.org/) with public key cryptography.\n\n```go\nprovider, _, err := vault.New(\"my-vault\", \n    vault.WithProvider(vault.ProviderTypeAge),\n    vault.WithAgePath(\"~/secrets.age\"),\n)\n```\n\n**Key Generation:**\n```bash\nage-keygen -o ~/.age/identity.txt\n# Add recipients to vault configuration\n```\n\n#### Keyring Provider\nIntegrates with the operating system's secure keyring.\n\n```go\nprovider, _, err := vault.New(\"my-vault\",\n    vault.WithProvider(vault.ProviderTypeKeyring),\n    vault.WithKeyringService(\"my-app-secrets\"),\n)\n```\n\nNo additional setup required - uses OS authentication.\n\n#### Unencrypted Provider\nStores secrets in plain text JSON files.\n\n```go\nprovider, _, err := vault.New(\"my-vault\",\n    vault.WithProvider(vault.ProviderTypeUnencrypted), \n    vault.WithUnencryptedPath(\"~/dev-secrets.json\"),\n)\n```\n\n### External CLI Providers\n\n#### External Provider\nIntegrates with any CLI tool for secret management. Supports popular tools like Bitwarden, 1Password, HashiCorp Vault, AWS SSM, and more.\n\n```go\nconfig := \u0026vault.Config{\n    ID: \"bitwarden\",\n    Type: vault.ProviderTypeExternal,\n    External: \u0026vault.ExternalConfig{\n        Get: vault.CommandConfig{\n            CommandTemplate: \"bw get password {{key}}\",\n        },\n        Set: vault.CommandConfig{\n            CommandTemplate: \"bw create item --name {{key}} --password {{value}}\",\n        },\n        // ... other operations\n    },\n}\n\nprovider, err := vault.NewExternalVaultProvider(config)\n```\n\n**External Provider Examples**\n\nReady-to-use configurations for popular CLI tools are available in the [`examples/`](./examples/) directory:\n\n- **[Bitwarden](./examples/providers/bitwarden.json)**\n- **[1Password](./examples/providers/1password.json)**\n- **[AWS SSM](./examples/providers/aws-ssm.json)**\n- **[pass](./examples/providers/pass.json)**\n\nSee the [examples README](./examples/README.md) for detailed setup instructions.\n\n## Usage\n\n### Basic Operations\n\n```go\n// Store a secret\nsecret := vault.NewSecretValue([]byte(\"my-secret-value\"))\nerr = provider.SetSecret(\"api-key\", secret)\n\n// Retrieve the secret\nretrieved, err := provider.GetSecret(\"api-key\")\nfmt.Println(\"Secret:\", retrieved.PlainTextString())\n\n// List all secrets\nsecrets, _ := provider.ListSecrets()\n\n// Check if secret exists\nexists, _ := provider.HasSecret(\"api-key\")\n\n// Get vault metadata\nmetadata := provider.Metadata()\n```\n\n### Configuration from File\n\n```go\n// Load configuration from JSON\nconfig, err := vault.LoadConfigJSON(\"vault-config.json\") \nprovider, _, err := vault.New(config.ID, vault.WithProvider(config.Type))\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fflowexec%2Fvault","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fflowexec%2Fvault","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fflowexec%2Fvault/lists"}