cachix/secretspec v0.7.0

0.7.0 - 2026-02-08

on GitHub

Release Notes

Added

• Declarative secret generation: secrets can now be auto-generated when missing by adding
  type and generate fields to secret config. Supported types: password, hex, base64,
  uuid, and command (for arbitrary shell commands). Generation triggers during check/run
  when a secret is missing, and the generated value is stored via the configured provider.

Changed

• OnePassword provider: Significant performance improvement by caching authentication status
  and using batch fetching with parallel threads. Reduces CLI calls from 2N sequential to
  ~2 sequential + N parallel for N secrets.

Install secretspec 0.7.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/cachix/secretspec/releases/download/v0.7.0/secretspec-installer.sh | sh

Download secretspec 0.7.0