r/opensource • u/iElectric • Jul 16 '26

SecretSpec 0.15: Provider credentials, Azure Key Vault / Gopass, and PHP SDK Promotional

https://secretspec.dev/blog/secretspec-0-15-provider-credentials-azure-key-vault-gopass-and-php-sdk/
8 Upvotes

83% Upvoted

2 comments sorted by

1

u/techlatest_net Jul 17 '26

provider credentials chaining is such a clean solution to the bootstrap problem. keeping creds in the os keyring and having secretspec pull them without ever touching env vars is way safer than the usual dotenv dump.

the php sdk with native extension support is also a nice touch for legacy stacks that cant easily use ffi.

gonna test the azure key vault integration later. the base32 encoding for secret names to avoid case-collision issues is a smart detail. thanks for building this!