Add devolutions support to secretspec

Add devolutions support to secretspec

2 votes

avatar

I miss the cli integration which I used have in 1password in my previous job.

The opensource system "secretspec" https://secretspec.dev/, gives all the same features, but for many different password manager backends. However, devolutions is not suppported.

See this video: Secure Declarative Secrets With SecretSpec | dotenv Files On Steroids
And the repo: cachix/secretspec: Declare secrets once. Store them anywhere.

My feature request is that you add devolutions support to secretspec:
See: Adding a New Provider | SecretSpec

All Comments (5)

avatar

Hello,
Thank you for your request. I’ve just opened a ticket for this, and our team will investigate the feasibility of adding this feature.
We’ll keep you updated on any progress.

Best regards,

Sébastien Aubin
Product manager - Password Management

avatar

@Sébastien Aubin Have you guys had time to consider this suggestion.

This would greatly increase the usefulness of devolution for developers without you guys having to develop your own developer-tooling.

We have a 'techplay day' at our company in two weeks dedicated to improving security. I would love to spent my time trying to implement this with our devolution enterprise devolution server.

If you don't have time to do this, then maybe take a look at the specification for the adding providers to secret spec. Then tell me if this is something which we as customers can implement our self using your APIs or similar?

Best wishes,

avatar

Hi,

I've got an internal prototype working, but it requires a currently unreleased revamped Devolutions CLI. I'm in touch with the SecretSpec developer and working towards getting Devolutions as a supported provider, but there are challenges ahead. Unlike other providers, we don't have an easy to reimplement interface, so the best solution is to wrap those interfaces inside the a neat CLI that SecretSpec can then interface with. I know SecretSpec is currently working on an IPC interface for easier integration with external processes, so this would likely be the way to go once it is stabilized. Stay tuned, within the next months I think we'll be able to release this and finally get Devolutions added to the supported providers in SecretSpec.

Marc-André Moreau

avatar

This is super cool.. Any progress on this?

avatar

It is still ongoing, the plan is to leverage the new IPC interface from SecretSpec for the devo CLI integration. I'm hoping to publish a first beta of the new CLI in coming weeks, and I've been sending feedback to Domen from SecretSpec on gaps and little things to fix in his new IPC protocol for SecretSpec.

Marc-André Moreau