#Secretspec
LightNews LightNews
matsuu.bsky.social
SecretSpecの紹介記事
Announcing SecretSpec: Declarative Secrets Management - devenv
Fast, Declarative, Reproducible, and Composable Developer Environments using Nix
devenv.sh
July 28, 2025 at 4:37 PM
a.baez.link
#Secretspec now has a #JSONRPC #IPC. I think this is where the tool is going to unlock so much. Being able to get secrets across the system using secretspec can let integration on the runtime. Like service accounts authorization without the vendor requirement. 🫠
IPC wire protocol
Shared framing, negotiation, cancellation, errors, and lifecycle for SecretSpec IPC
secretspec.dev
September 29, 2026 at 12:22 AM
permacodeur.fr
Je découvre secretspec (github.com/cachix/se...), ça m'a l'air intéressant à suivre dans la galaxie des outils qui nous aideraient à gérer les var d'env, secrets, etc. 😉
GitHub - cachix/secretspec: Declarative secrets, every environment, any provider.
Declarative secrets, every environment, any provider. - cachix/secretspec
github.com
April 23, 2026 at 12:28 PM
hackernewsbot.bsky.social
SecretSpec: Declarative Secrets Management | Discussion
Announcing SecretSpec: Declarative Secrets Management - devenv
Fast, Declarative, Reproducible, and Composable Developer Environments using Nix
devenv.sh
July 21, 2025 at 4:20 PM
matsuu.bsky.social
機密情報の利用方法と保存先を分離して管理できるCLIツールかな。利用方法はTOMLファイルで宣言的に記述。機密情報の保存先は.envファイル、1Password、LastPass、Keyring、環境変数など様々なバックエンドに対応。Rust実装
GitHub - cachix/secretspec: Declarative secrets, every environment, any provider.
Declarative secrets, every environment, any provider. - cachix/secretspec
github.com
July 28, 2025 at 4:35 PM
aur.archlinux.org.web.brid.gy
secretspec-bin
Declarative secrets, every environment, any provider
aur.archlinux.org
July 13, 2026 at 2:42 AM
throwable.bsky.social
📦 cachix/secretspec v0.21.0

PHP SDK for SecretSpec, a declarative secrets manager. A thin client over the shared Rust resolver; sources live in secretspec-php/.

🔗 https://github.com/cachix/secretspec
September 23, 2026 at 6:36 AM
a.baez.link
I been sleeping on #secretspec. 😅 It has now support for composite secrets! Think multi secrets put together in one string.

The killer feature for those DATABASE_URL all over the place. 😛

secretspec.dev/concepts/com...
Composed Secrets
Derive read-only values from other declared secrets with strict templates
secretspec.dev
August 7, 2026 at 3:50 PM
technotenshi.bsky.social
SecretSpec offers a new declarative approach to secrets management, enabling one spec to work across local dev, CI/CD, and production with different providers, all without changing app code. Not a paid promotion or endorsement.

#DevSecOps #SecretsManagement #OpenSource #Infosec
Announcing SecretSpec: Declarative Secrets Management - devenv
Fast, Declarative, Reproducible, and Composable Developer Environments using Nix
devenv.sh
July 21, 2025 at 6:43 PM
matsuu.bsky.social
自分はこのあたりのツールとしてSecretSpecを推してるんだけど、様々なアイデアをもとに切磋琢磨するのは良いこと。わいわい。
.env に API キーを書きたくないので 軽いCLI を作った
zenn.dev
July 5, 2026 at 1:00 PM
nixpkgs-prs-bot.bsky.social
#558846 rqlite: 10.2.7 -> 10.3.0
#558845 scap-security-guide: 0.1.81 -> 0.1.82
#558844 gomuks-web: 26.07 -> 26.08
#558843 gitoxide: 0.57.0 -> 0.58.0
#558838 secretspec: 0.19.1 -> 0.20.0
#558831 cri-tools: 1.36.0 -> 1.37.0
#558830 vopono: 0.10.21 -> 1.0.1
#558829 moon: 2.5.2 -> 2.5.3
September 2, 2026 at 12:05 AM
throwable.bsky.social
📦 cachix/secretspec v0.20.0

PHP SDK for SecretSpec, a declarative secrets manager. A thin client over the shared Rust resolver; sources live in secretspec-php/.

🔗 https://github.com/cachix/secretspec
August 31, 2026 at 5:58 PM
domenkozar.bsky.social
secretspec.dev/blog/secrets...
SecretSpec 0.20: Git, Docker, inline specs, and five new providers
Let Git and Docker retrieve credentials from any provider, declare secrets in application code, use the JVM SDK, and deploy on Alpine.
secretspec.dev
August 31, 2026 at 8:49 PM
throwable.bsky.social
📦 cachix/secretspec v0.19.0

PHP SDK for SecretSpec, a declarative secrets manager. A thin client over the shared Rust resolver; sources live in secretspec-php/.

🔗 https://github.com/cachix/secretspec
August 11, 2026 at 10:11 PM
shaven.beauty
devenv and secretspec are so nice wtf
August 11, 2026 at 4:18 PM
throwable.bsky.social
📦 cachix/secretspec v0.18.0

PHP SDK for SecretSpec, a declarative secrets manager. A thin client over the shared Rust resolver; sources live in secretspec-php/.

🔗 https://github.com/cachix/secretspec
August 4, 2026 at 6:49 AM
chrisshort.net
Where .env Went Wrong #devopsish
Where .env Went Wrong | SecretSpec
A local convenience became a secrets interface, an environment model, and a deployment format. It was never designed to be any of them.
secretspec.dev
July 31, 2026 at 8:05 PM
domenkozar.bsky.social
SecretSpec 0.17 is out.

Give each service only its declared secrets with scopes, cache slow remote providers locally, cross-secret validation.

20 providers, this release adds: SOPS, age, KeePass KDBX, OpenBao, Scaleway, systemd credentials.

Also, GitHub Actions.

secretspec.dev/blog/secrets...
https://secretspec.dev/blog/secretspec-0-17-scopes-secrets-caching-age-and-systemd-credentials/
t.co
July 27, 2026 at 11:07 PM
hn100.bsky.social
SecretSpec 0.17: Scopes, secrets caching, SOPS, age, and systemd credentials

Discussion
July 27, 2026 at 11:58 AM
lobsters-feed.bsky.social
But I Use SOPS https://lobste.rs/s/hebflx ##nix
But I Use SOPS
SOPS encrypts files. SecretSpec gives applications a portable contract for the secrets they need.
secretspec.dev
July 23, 2026 at 3:10 PM
throwable.bsky.social
📦 cachix/secretspec v0.16.0

PHP SDK for SecretSpec, a declarative secrets manager. A thin client over the shared Rust resolver; sources live in secretspec-php/.

🔗 https://github.com/cachix/secretspec
July 18, 2026 at 2:54 AM
throwable.bsky.social
📦 cachix/secretspec v0.15.0

PHP SDK for SecretSpec, a declarative secrets manager. A thin client over the shared Rust resolver; sources live in secretspec-php/.

🔗 https://github.com/cachix/secretspec
July 16, 2026 at 8:14 PM
homebrew-new-pkgs.bsky.social
🍻 secretspec 🍻

Declarative secrets management tool

🔗 https://secretspec.dev

#homebrew #newpkg #macos #linux #formula
August 9, 2025 at 12:48 PM
a.baez.link
I looked over it. And it looks simple enough to work with. Not dissimilar to other dotenv practices. 😄

Still, I very much like the secretspec provider agnostic utility.

Making different environment functional, with same spec, is the hard part. And secretspec achieve this for me right now. 😎
August 14, 2025 at 1:35 PM
a.baez.link
Found out about a new secret handling standard called #secretspec.

Has some nice simplicity with #dotenv. And integrates with #1password. 😎

I have workloads doing this stuff all over the place. So it's definitely nice maybe not reinventing the same wheel for the 42nd time. 🫠
Declarative secrets, every environment, any provider
Declarative secrets, every environment, any provider
secretspec.dev
August 12, 2025 at 3:50 PM