cachix/secretspec v0.8.0

0.8.0 - 2026-03-11

on GitHub

Release Notes

Added

• HashiCorp Vault / OpenBao (vault) provider for Vault KV v1/v2 secret storage, with support
  for namespaces, TLS configuration, and OpenBao compatibility (requires --features vault)
• AWS Secrets Manager (awssm) provider for AWS secret storage integration (requires --features awssm)
• Support running secretspec from subdirectories: the CLI now walks up the directory tree to find the nearest secretspec.toml, similar to cargo and git. Also adds a -f/--file flag (and SECRETSPEC_FILE env var) to explicitly specify the config file path (#59)

Changed

• Extract shared block_on async helper from AWSSM and GCSM providers into provider::block_on

Fixed

• GCSM provider no longer panics when called from within an existing tokio runtime

Install secretspec 0.8.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/cachix/secretspec/releases/download/v0.8.0/secretspec-installer.sh | sh

Download secretspec 0.8.0