https://github.com/mizcausevic-dev/secret-rotation-scheduler
Ops-heavy automation for secret rotation windows, owner prompts, and stale-secret detection across enterprise credential stores. Practical SRE tooling for credential hygiene.
https://github.com/mizcausevic-dev/secret-rotation-scheduler
analytics-engineering backend credential-rotation data-modeling duckdb ops-automation platform-engineering python secret-management security technical-seo
Last synced: 7 days ago
JSON representation
Ops-heavy automation for secret rotation windows, owner prompts, and stale-secret detection across enterprise credential stores. Practical SRE tooling for credential hygiene.
- Host: GitHub
- URL: https://github.com/mizcausevic-dev/secret-rotation-scheduler
- Owner: mizcausevic-dev
- Created: 2026-05-11T20:46:03.000Z (27 days ago)
- Default Branch: main
- Last Pushed: 2026-05-17T05:17:11.000Z (22 days ago)
- Last Synced: 2026-05-17T07:31:03.629Z (22 days ago)
- Topics: analytics-engineering, backend, credential-rotation, data-modeling, duckdb, ops-automation, platform-engineering, python, secret-management, security, technical-seo
- Language: Python
- Homepage: https://kineticgain.com/
- Size: 253 KB
- Stars: 0
- Watchers: 0
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
Awesome Lists containing this project
README
# Secret Rotation Scheduler
Secret Rotation Scheduler is a Python and FastAPI backend for converting credential age, expiration pressure, and ownership gaps into explicit rotation decisions. It treats secret hygiene as an operating system concern instead of a background checklist.
## Portfolio Takeaway
- Python backend with practical security-hygiene logic
- stale rotation, break-glass exposure, and missing backup ownership turned into concrete action
- JSON API, CLI, tests, docs, and real PNG proof
## Overview
| Area | Details |
| --- | --- |
| Language | Python 3.11+ |
| Framework | FastAPI |
| Focus | Secret rotation scheduling, stale credential detection, backup ownership, expiration pressure |
| Routes | `/`, `/docs`, `/api/dashboard/summary`, `/api/secrets`, `/api/secrets/{id}`, `/api/sample`, `/api/analyze/rotation` |
| Extra | CLI at `python -m app.cli` |
## What It Does
- models secret inventory with owner lanes, expiration windows, and break-glass posture
- scores each payload into `stable`, `watch`, or `escalate`
- returns a rotation decision of `schedule`, `prioritize`, or `rotate-now`
- exposes a JSON API and CLI that can feed runbooks, internal consoles, or reminder workflows
## Architecture
```mermaid
flowchart LR
A["Secret inventory intake"] --> B["FastAPI routes and CLI"]
B --> C["Rotation engine"]
C --> D["Staleness and expiration scoring"]
C --> E["Owner lane decision"]
C --> F["Immediate rotation action"]
D --> G["JSON and CLI output"]
E --> G
F --> G
```
Additional detail lives in [docs/architecture.md](./docs/architecture.md).
## Example Payload
```json
{
"id": "sec-7401",
"system": "billing-export",
"owner_lane": "platform-security",
"environment": "prod",
"secret_type": "api-key",
"rotation_window_days": 30,
"days_since_rotation": 43,
"expires_in_days": 6,
"is_break_glass": false,
"has_backup_owner": false,
"last_rotation_actor": "billing-platform",
"next_steps": [
"Assign a backup owner before the next rotation attempt."
],
"blockers": [
"Rotation runbook still references the legacy export path."
]
}
```
## Screenshots
### Hero
### Queue Lanes
### Rotation Decision
### Validation Proof
## Local Run
```powershell
cd secret-rotation-scheduler
py -3.11 -m venv .venv
.\.venv\Scripts\python.exe -m pip install -r requirements.txt
.\.venv\Scripts\python.exe -m uvicorn app.main:app --reload --port 4461
```
Then open:
- `http://127.0.0.1:4461/`
- `http://127.0.0.1:4461/docs`
CLI:
```powershell
.\.venv\Scripts\python.exe -m app.cli
```
## Tech Stack
[](https://www.python.org/)
[](https://fastapi.tiangolo.com/)
## Portfolio Links
- [Kinetic Gain](https://kineticgain.com/)
- [LinkedIn](https://www.linkedin.com/in/mirzacausevic)
- [GitHub](https://github.com/mizcausevic-dev)
- [Skills Page](https://mizcausevic.com/skills/)