#Secretspec now has a #JSONRPC #IPC. I think this is where the tool is going to unlock so much. Being able to get secrets across the system using secretspec can let integration on the runtime. Like service accounts authorization without the vendor requirement. 🫠
IPC wire protocol
Shared framing, negotiation, cancellation, errors, and lifecycle for SecretSpec IPC
secretspec.dev
September 29, 2026 at 12:22 AM
#Secretspec now has a #JSONRPC #IPC. I think this is where the tool is going to unlock so much. Being able to get secrets across the system using secretspec can let integration on the runtime. Like service accounts authorization without the vendor requirement. 🫠
📦 cachix/secretspec v0.21.0
PHP SDK for SecretSpec, a declarative secrets manager. A thin client over the shared Rust resolver; sources live in secretspec-php/.
🔗 https://github.com/cachix/secretspec
PHP SDK for SecretSpec, a declarative secrets manager. A thin client over the shared Rust resolver; sources live in secretspec-php/.
🔗 https://github.com/cachix/secretspec
September 23, 2026 at 6:36 AM
📦 cachix/secretspec v0.21.0
PHP SDK for SecretSpec, a declarative secrets manager. A thin client over the shared Rust resolver; sources live in secretspec-php/.
🔗 https://github.com/cachix/secretspec
PHP SDK for SecretSpec, a declarative secrets manager. A thin client over the shared Rust resolver; sources live in secretspec-php/.
🔗 https://github.com/cachix/secretspec
#558846 rqlite: 10.2.7 -> 10.3.0
#558845 scap-security-guide: 0.1.81 -> 0.1.82
#558844 gomuks-web: 26.07 -> 26.08
#558843 gitoxide: 0.57.0 -> 0.58.0
#558838 secretspec: 0.19.1 -> 0.20.0
#558831 cri-tools: 1.36.0 -> 1.37.0
#558830 vopono: 0.10.21 -> 1.0.1
#558829 moon: 2.5.2 -> 2.5.3
#558845 scap-security-guide: 0.1.81 -> 0.1.82
#558844 gomuks-web: 26.07 -> 26.08
#558843 gitoxide: 0.57.0 -> 0.58.0
#558838 secretspec: 0.19.1 -> 0.20.0
#558831 cri-tools: 1.36.0 -> 1.37.0
#558830 vopono: 0.10.21 -> 1.0.1
#558829 moon: 2.5.2 -> 2.5.3
September 2, 2026 at 12:05 AM
#558846 rqlite: 10.2.7 -> 10.3.0
#558845 scap-security-guide: 0.1.81 -> 0.1.82
#558844 gomuks-web: 26.07 -> 26.08
#558843 gitoxide: 0.57.0 -> 0.58.0
#558838 secretspec: 0.19.1 -> 0.20.0
#558831 cri-tools: 1.36.0 -> 1.37.0
#558830 vopono: 0.10.21 -> 1.0.1
#558829 moon: 2.5.2 -> 2.5.3
#558845 scap-security-guide: 0.1.81 -> 0.1.82
#558844 gomuks-web: 26.07 -> 26.08
#558843 gitoxide: 0.57.0 -> 0.58.0
#558838 secretspec: 0.19.1 -> 0.20.0
#558831 cri-tools: 1.36.0 -> 1.37.0
#558830 vopono: 0.10.21 -> 1.0.1
#558829 moon: 2.5.2 -> 2.5.3
📦 cachix/secretspec v0.20.0
PHP SDK for SecretSpec, a declarative secrets manager. A thin client over the shared Rust resolver; sources live in secretspec-php/.
🔗 https://github.com/cachix/secretspec
PHP SDK for SecretSpec, a declarative secrets manager. A thin client over the shared Rust resolver; sources live in secretspec-php/.
🔗 https://github.com/cachix/secretspec
August 31, 2026 at 5:58 PM
📦 cachix/secretspec v0.20.0
PHP SDK for SecretSpec, a declarative secrets manager. A thin client over the shared Rust resolver; sources live in secretspec-php/.
🔗 https://github.com/cachix/secretspec
PHP SDK for SecretSpec, a declarative secrets manager. A thin client over the shared Rust resolver; sources live in secretspec-php/.
🔗 https://github.com/cachix/secretspec
📦 cachix/secretspec v0.19.0
PHP SDK for SecretSpec, a declarative secrets manager. A thin client over the shared Rust resolver; sources live in secretspec-php/.
🔗 https://github.com/cachix/secretspec
PHP SDK for SecretSpec, a declarative secrets manager. A thin client over the shared Rust resolver; sources live in secretspec-php/.
🔗 https://github.com/cachix/secretspec
August 11, 2026 at 10:11 PM
📦 cachix/secretspec v0.19.0
PHP SDK for SecretSpec, a declarative secrets manager. A thin client over the shared Rust resolver; sources live in secretspec-php/.
🔗 https://github.com/cachix/secretspec
PHP SDK for SecretSpec, a declarative secrets manager. A thin client over the shared Rust resolver; sources live in secretspec-php/.
🔗 https://github.com/cachix/secretspec
devenv and secretspec are so nice wtf
August 11, 2026 at 4:18 PM
devenv and secretspec are so nice wtf
I been sleeping on #secretspec. 😅 It has now support for composite secrets! Think multi secrets put together in one string.
The killer feature for those DATABASE_URL all over the place. 😛
secretspec.dev/concepts/com...
The killer feature for those DATABASE_URL all over the place. 😛
secretspec.dev/concepts/com...
Composed Secrets
Derive read-only values from other declared secrets with strict templates
secretspec.dev
August 7, 2026 at 3:50 PM
I been sleeping on #secretspec. 😅 It has now support for composite secrets! Think multi secrets put together in one string.
The killer feature for those DATABASE_URL all over the place. 😛
secretspec.dev/concepts/com...
The killer feature for those DATABASE_URL all over the place. 😛
secretspec.dev/concepts/com...
📦 cachix/secretspec v0.18.0
PHP SDK for SecretSpec, a declarative secrets manager. A thin client over the shared Rust resolver; sources live in secretspec-php/.
🔗 https://github.com/cachix/secretspec
PHP SDK for SecretSpec, a declarative secrets manager. A thin client over the shared Rust resolver; sources live in secretspec-php/.
🔗 https://github.com/cachix/secretspec
August 4, 2026 at 6:49 AM
📦 cachix/secretspec v0.18.0
PHP SDK for SecretSpec, a declarative secrets manager. A thin client over the shared Rust resolver; sources live in secretspec-php/.
🔗 https://github.com/cachix/secretspec
PHP SDK for SecretSpec, a declarative secrets manager. A thin client over the shared Rust resolver; sources live in secretspec-php/.
🔗 https://github.com/cachix/secretspec
Where .env Went Wrong #devopsish
Where .env Went Wrong | SecretSpec
A local convenience became a secrets interface, an environment model, and a deployment format. It was never designed to be any of them.
secretspec.dev
July 31, 2026 at 8:05 PM
Where .env Went Wrong #devopsish
SecretSpec 0.17 is out.
Give each service only its declared secrets with scopes, cache slow remote providers locally, cross-secret validation.
20 providers, this release adds: SOPS, age, KeePass KDBX, OpenBao, Scaleway, systemd credentials.
Also, GitHub Actions.
secretspec.dev/blog/secrets...
Give each service only its declared secrets with scopes, cache slow remote providers locally, cross-secret validation.
20 providers, this release adds: SOPS, age, KeePass KDBX, OpenBao, Scaleway, systemd credentials.
Also, GitHub Actions.
secretspec.dev/blog/secrets...
https://secretspec.dev/blog/secretspec-0-17-scopes-secrets-caching-age-and-systemd-credentials/
t.co
July 27, 2026 at 11:07 PM
SecretSpec 0.17 is out.
Give each service only its declared secrets with scopes, cache slow remote providers locally, cross-secret validation.
20 providers, this release adds: SOPS, age, KeePass KDBX, OpenBao, Scaleway, systemd credentials.
Also, GitHub Actions.
secretspec.dev/blog/secrets...
Give each service only its declared secrets with scopes, cache slow remote providers locally, cross-secret validation.
20 providers, this release adds: SOPS, age, KeePass KDBX, OpenBao, Scaleway, systemd credentials.
Also, GitHub Actions.
secretspec.dev/blog/secrets...
But I Use SOPS https://lobste.rs/s/hebflx ##nix
But I Use SOPS
SOPS encrypts files. SecretSpec gives applications a portable contract for the secrets they need.
secretspec.dev
July 23, 2026 at 3:10 PM
But I Use SOPS https://lobste.rs/s/hebflx ##nix
📦 cachix/secretspec v0.16.0
PHP SDK for SecretSpec, a declarative secrets manager. A thin client over the shared Rust resolver; sources live in secretspec-php/.
🔗 https://github.com/cachix/secretspec
PHP SDK for SecretSpec, a declarative secrets manager. A thin client over the shared Rust resolver; sources live in secretspec-php/.
🔗 https://github.com/cachix/secretspec
July 18, 2026 at 2:54 AM
📦 cachix/secretspec v0.16.0
PHP SDK for SecretSpec, a declarative secrets manager. A thin client over the shared Rust resolver; sources live in secretspec-php/.
🔗 https://github.com/cachix/secretspec
PHP SDK for SecretSpec, a declarative secrets manager. A thin client over the shared Rust resolver; sources live in secretspec-php/.
🔗 https://github.com/cachix/secretspec
📦 cachix/secretspec v0.15.0
PHP SDK for SecretSpec, a declarative secrets manager. A thin client over the shared Rust resolver; sources live in secretspec-php/.
🔗 https://github.com/cachix/secretspec
PHP SDK for SecretSpec, a declarative secrets manager. A thin client over the shared Rust resolver; sources live in secretspec-php/.
🔗 https://github.com/cachix/secretspec
July 16, 2026 at 8:14 PM
📦 cachix/secretspec v0.15.0
PHP SDK for SecretSpec, a declarative secrets manager. A thin client over the shared Rust resolver; sources live in secretspec-php/.
🔗 https://github.com/cachix/secretspec
PHP SDK for SecretSpec, a declarative secrets manager. A thin client over the shared Rust resolver; sources live in secretspec-php/.
🔗 https://github.com/cachix/secretspec
NowBrowsing: Declare secrets once. Store them anywhere. | SecretSpec secretspec.dev
Declare secrets once. Store them anywhere.
Declare what your application needs in secretspec.toml — store the values in any of 11 backends. No secrets in git. Same code, every environment.
secretspec.dev
July 5, 2026 at 2:10 PM
NowBrowsing: Declare secrets once. Store them anywhere. | SecretSpec secretspec.dev
自分はこのあたりのツールとしてSecretSpecを推してるんだけど、様々なアイデアをもとに切磋琢磨するのは良いこと。わいわい。
.env に API キーを書きたくないので 軽いCLI を作った
zenn.dev
July 5, 2026 at 1:00 PM
自分はこのあたりのツールとしてSecretSpecを推してるんだけど、様々なアイデアをもとに切磋琢磨するのは良いこと。わいわい。
SecretSpec 0.13: SDKs for Python, Node.js, Go, Ruby, and Haskell
Discussion | lobsters | Author: alurm
Discussion | lobsters | Author: alurm
SecretSpec 0.13: SDKs for Python, Node.js, Go, Ruby, and Haskell
Native Python, Node.js, Go, Ruby, and Haskell bindings over the same Rust resolver as the CLI.
secretspec.dev
July 5, 2026 at 4:41 AM
SecretSpec 0.13: SDKs for Python, Node.js, Go, Ruby, and Haskell
Discussion | lobsters | Author: alurm
Discussion | lobsters | Author: alurm
SecretSpec 0.13: SDKs for Python, Node.js, Go, Ruby, and Haskell https://lobste.rs/s/5r5ebh ##security ##release
SecretSpec 0.13: SDKs for Python, Node.js, Go, Ruby, and Haskell
Native Python, Node.js, Go, Ruby, and Haskell bindings over the same Rust resolver as the CLI.
secretspec.dev
July 4, 2026 at 4:30 PM
SecretSpec 0.13: SDKs for Python, Node.js, Go, Ruby, and Haskell https://lobste.rs/s/5r5ebh ##security ##release
見てる: "Declarative secrets, every environment, any provider | SecretSpec" https://secretspec.dev/
May 15, 2026 at 6:06 AM
見てる: "Declarative secrets, every environment, any provider | SecretSpec" https://secretspec.dev/
Merged PRs for 2026-05-13
Modules
#519936 nixos/tests/nginx-etag: fix aarch64-linux compat
Packages
#519940 secretspec: 0.8.2 -> 0.10.1
#519938 nodejs_22: 22.22.2 -> 22.22.3
#519937 python3Packages.mypy-boto3-*: updates
#519935 python3Packages.tencentcloud-sdk-python: 3.1.93 -> 3.1.95
Modules
#519936 nixos/tests/nginx-etag: fix aarch64-linux compat
Packages
#519940 secretspec: 0.8.2 -> 0.10.1
#519938 nodejs_22: 22.22.2 -> 22.22.3
#519937 python3Packages.mypy-boto3-*: updates
#519935 python3Packages.tencentcloud-sdk-python: 3.1.93 -> 3.1.95
May 14, 2026 at 12:05 AM
Merged PRs for 2026-05-13
Modules
#519936 nixos/tests/nginx-etag: fix aarch64-linux compat
Packages
#519940 secretspec: 0.8.2 -> 0.10.1
#519938 nodejs_22: 22.22.2 -> 22.22.3
#519937 python3Packages.mypy-boto3-*: updates
#519935 python3Packages.tencentcloud-sdk-python: 3.1.93 -> 3.1.95
Modules
#519936 nixos/tests/nginx-etag: fix aarch64-linux compat
Packages
#519940 secretspec: 0.8.2 -> 0.10.1
#519938 nodejs_22: 22.22.2 -> 22.22.3
#519937 python3Packages.mypy-boto3-*: updates
#519935 python3Packages.tencentcloud-sdk-python: 3.1.93 -> 3.1.95
Je découvre secretspec (github.com/cachix/se...), ça m'a l'air intéressant à suivre dans la galaxie des outils qui nous aideraient à gérer les var d'env, secrets, etc. 😉
GitHub - cachix/secretspec: Declarative secrets, every environment, any provider.
Declarative secrets, every environment, any provider. - cachix/secretspec
github.com
April 23, 2026 at 12:28 PM
Je découvre secretspec (github.com/cachix/se...), ça m'a l'air intéressant à suivre dans la galaxie des outils qui nous aideraient à gérer les var d'env, secrets, etc. 😉
SecretSpec 0.7: Declarative Secret Generation - devenv https://lobste.rs/s/6lutpb ##security
SecretSpec 0.7: Declarative Secret Generation - devenv
Fast, Declarative, Reproducible, and Composable Developer Environments using Nix
devenv.sh
February 9, 2026 at 4:30 AM
SecretSpec 0.7: Declarative Secret Generation - devenv https://lobste.rs/s/6lutpb ##security
#480455 opencode: refactor to use finalAttrs more consistently
#480451 python3Packages.tuya-device-sharing-sdk: 0.2.8 -> 0.2.9
#480450 enpass-cli: 1.6.5 -> 1.7.0
#480449 topicctl: 2.0.0 -> 2.0.1
#480445 git-credential-oauth: 0.17.1 -> 0.17.2
#480439 secretspec: 0.5.1 -> 0.6.1
#480451 python3Packages.tuya-device-sharing-sdk: 0.2.8 -> 0.2.9
#480450 enpass-cli: 1.6.5 -> 1.7.0
#480449 topicctl: 2.0.0 -> 2.0.1
#480445 git-credential-oauth: 0.17.1 -> 0.17.2
#480439 secretspec: 0.5.1 -> 0.6.1
January 16, 2026 at 12:05 AM
#480455 opencode: refactor to use finalAttrs more consistently
#480451 python3Packages.tuya-device-sharing-sdk: 0.2.8 -> 0.2.9
#480450 enpass-cli: 1.6.5 -> 1.7.0
#480449 topicctl: 2.0.0 -> 2.0.1
#480445 git-credential-oauth: 0.17.1 -> 0.17.2
#480439 secretspec: 0.5.1 -> 0.6.1
#480451 python3Packages.tuya-device-sharing-sdk: 0.2.8 -> 0.2.9
#480450 enpass-cli: 1.6.5 -> 1.7.0
#480449 topicctl: 2.0.0 -> 2.0.1
#480445 git-credential-oauth: 0.17.1 -> 0.17.2
#480439 secretspec: 0.5.1 -> 0.6.1