LightNews — News, ranked by scholars

@giggio.net

O #OpenBao segue liberando releases, deixando claro que o Vault da Hashicorp vai ficar para trás. É isso que acontece com quem trai o software livre.

Release v2.2.0 · openbao/openbao

Changelog 8c6ec0b: Add API and CLI commands to promote/demote nodes in the Raft cluster (#996) (#1072) (@JanMa) cf7800c: Backport: Bump actions/cache to v4, use pinning (#1064) (#1078) (@JanMa) 7e...

github.com

March 5, 2025 at 1:39 PM

𝙳𝚘𝚝𝚊𝚗 𝙷𝚘𝚛𝚘𝚟𝚒𝚝𝚜

@horovits.bsky.social

#OpenBao, the #opensource fork of Hashi's #Vault, has released its 1st minor release v2.1.0
This, after having reached its first GA v2.0.0 last quarter. Nice cadence!
openbao.org/blog/release...

If you missed this @linuxfoundation.org #secretManagement project & Vault relicensing:
lnkd.in/dX6Nsta2

December 23, 2024 at 2:09 PM

GitHub Trending

@github-trending.bsky.social

📦 openbao / openbao
⭐ 7,519 (+16)
🗒 Go

OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.

GitHub - openbao/openbao: OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.

OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. - openbao/openbao

github.com

September 25, 2026 at 11:17 PM

The Standup

@standup.thecompound.tech

OpenBao's recovery mode let a timing attack extract its recovery token; OpenBao v2.6.0 patches it. The exposure is limited to highly privileged recovery mode. #dev

CRITICAL: github.com/openbao/openbao — OpenBao's Recovery Mode Vulnerable To Token Leakage via Timing Attack

September 22, 2026 at 9:07 PM

GolangOSS

@golangoss.bsky.social

openbao (⭐️ 7456)

OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.

#go

September 22, 2026 at 11:36 AM

Mohamed Ali

@muttadrij.bsky.social

🔥 GitHub Trending — Sunday, September 27, 2026

#1 paperclip · #2 hindsight · #3 univer · #4 rohitg00 · #5 openbao

#GitHub #OpenSource #Dev

September 27, 2026 at 6:00 AM

Flux Project

@fluxcd.io

check out this guide on how to bootstrap OpenBao & Flux with no secrets! We <3 workload identity

(we also show a sovereign key signing flow)
@openbao-official.bsky.social

Flux and OpenBao: Secrets and Signatures

This post shows off two Flux integrations with OpenBao: SOPS decryption through workload identity and sovereign OCI artifact signing with Cosign.

fluxcd.io

July 27, 2026 at 1:54 PM

Aurélie Vache

@aurelievache.bsky.social

Ahh ça fait plaisir 🙂
A noter que le KMS est aussi compatible avec OpenBao depuis peu 😇
openbao.org/docs/configu...

ovhcloud seal | OpenBao

The OVHcloud KMS seal configures OpenBao to use OVHcloud KMS as the seal wrapping mechanism.

openbao.org

July 24, 2026 at 11:16 AM

tntr

@eyenx.ch

www.youtube.com/watch?v=hPBT...

Sustainable Secrets Management with OpenBao #openbao #opensource

Sustainable Secrets Management with OpenBao

YouTube video by Siemens Knowledge Hub

www.youtube.com

July 27, 2026 at 11:45 AM

Agentic AI Foundation

@aaif.io

MCP's spec says protect requestState integrity. It doesn't say where keys live, how replicas share them, or what enforces single-use.

A follow-up on the three operational gaps the SDK leaves open, and how to close them with OpenBao.

https://bit.ly/3VcS57V

September 25, 2026 at 3:00 PM

tntr

@eyenx.ch

github.com/openbao/open...

This will be big #openbao #secretsmanagement

RFC - Add Namespace Support to OpenBao · Issue #787 · openbao/openbao · GitHub

Summary Introduce namespaces within OpenBao to allow strong multi-tenancy and logical separation of disjoint ACL policies, quotas, plugins etc. Many fragments of namespace support already exist and...

github.com

May 23, 2025 at 12:08 PM

Jorijn Schrijvershof

@jorijn.toot.community.ap.brid.gy

HashiCorp Vault vs OpenBao: a thorough comparison for platform teams

https://jorijn.com/en/blog/hashicorp-vault-vs-openbao/

#devops #security #opensource #jorijncom

HashiCorp Vault vs OpenBao: a thorough comparison for platform teams | Jorijn Schrijvershof

HashiCorp Vault vs OpenBao compared in depth: licensing, feature parity, namespaces, Enterprise gaps, migration paths, and how to pick one in 2026.

jorijn.com

April 29, 2026 at 2:25 PM

openbao-official.bsky.social

@openbao-official.bsky.social

Check out part 4 of Alex's blog series on OpenBao's features, talking about improvements to the plugin ecosystem: openbao.org/blog/feature...

What integrations would you like OpenBao to have? How would you like to see writing plugins made easier?

#OpenBao #Secrets #OpenSource #HashiCorp #Vault

OpenBao Features - Declarative Plugins | OpenBao

Blog series describing OpenBao's features. This episode focuses on declarative plugin distribution and registration in OpenBao.

openbao.org

July 31, 2026 at 4:11 PM

Dmitry Shurupov

@dshnow.bsky.social

#OpenBao gets enterprise support from ControlPlane. Why this company? They say they are #1 contributor to OpenBao and their "core team created Vault at HashiCorp". Sounds convincing enough and fantastic for this #OpenSource project.

control-plane.io/enterprise-f...

ControlPlane Enterprise for OpenBao

The open source Vault alternative, backed by its #1 contributor. Enterprise secrets management without IBM lock-in. Migration services, support, and funded development from the team that built Vault.

control-plane.io

March 12, 2026 at 11:43 AM