cachix/secretspec v0.11.0

0.11.0 - 2026-05-22

on GitHub

Release Notes

Added

• AWS Secrets Manager (awssm) provider: support for a ?prefix= query
  parameter in the provider URI (e.g., awssm://us-east-1?prefix=myteam).
  The prefix is prepended to all secret names
  (myteam/secretspec/{project}/{profile}/{key}). Closes
  #92.
• Provider aliases can now be declared at the project level in a top-level
  [providers] table of secretspec.toml. Aliases declared there are visible
  to per-secret providers = [...] lists and to --provider/SECRETSPEC_PROVIDER,
  and are merged with the existing user-level [defaults.providers] map in
  ~/.config/secretspec/config.toml. On name conflicts the project entry wins,
  so a team's checked-in mapping cannot be silently shadowed by a stale local
  config. Closes #79 and
  addresses the "share aliases via VCS" half of
  #90.

Fixed

• Profile-not-found errors no longer surface as the confusing
  Secret 'Profile 'X' not found' not found. They now use the dedicated
  InvalidProfile variant and include the list of profiles defined in
  secretspec.toml, e.g.
  Invalid profile: 'production' is not defined in secretspec.toml. Available profiles: default, dev.
  Affects check, run, get, set, and import. Surfaced via
  #79.

Install secretspec 0.11.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/cachix/secretspec/releases/download/v0.11.0/secretspec-installer.sh | sh

Download secretspec 0.11.0