2 votes
I miss the cli integration which I used have in 1password in my previous job.
The opensource system "secretspec" https://secretspec.dev/, gives all the same features, but for many different password manager backends. However, devolutions is not suppported.
See this video: Secure Declarative Secrets With SecretSpec | dotenv Files On Steroids
And the repo: cachix/secretspec: Declare secrets once. Store them anywhere.
My feature request is that you add devolutions support to secretspec:
See: Adding a New Provider | SecretSpec
Hello,
Thank you for your request. I’ve just opened a ticket for this, and our team will investigate the feasibility of adding this feature.
We’ll keep you updated on any progress.
Best regards,
Sébastien Aubin
Product manager - Password Management
@Sébastien Aubin Have you guys had time to consider this suggestion.
This would greatly increase the usefulness of devolution for developers without you guys having to develop your own developer-tooling.
We have a 'techplay day' at our company in two weeks dedicated to improving security. I would love to spent my time trying to implement this with our devolution enterprise devolution server.
If you don't have time to do this, then maybe take a look at the specification for the adding providers to secret spec. Then tell me if this is something which we as customers can implement our self using your APIs or similar?
Best wishes,
Hi,
I've got an internal prototype working, but it requires a currently unreleased revamped Devolutions CLI. I'm in touch with the SecretSpec developer and working towards getting Devolutions as a supported provider, but there are challenges ahead. Unlike other providers, we don't have an easy to reimplement interface, so the best solution is to wrap those interfaces inside the a neat CLI that SecretSpec can then interface with. I know SecretSpec is currently working on an IPC interface for easier integration with external processes, so this would likely be the way to go once it is stabilized. Stay tuned, within the next months I think we'll be able to release this and finally get Devolutions added to the supported providers in SecretSpec.
Marc-André Moreau
This is super cool.. Any progress on this?
It is still ongoing, the plan is to leverage the new IPC interface from SecretSpec for the devo CLI integration. I'm hoping to publish a first beta of the new CLI in coming weeks, and I've been sending feedback to Domen from SecretSpec on gaps and little things to fix in his new IPC protocol for SecretSpec.
Marc-André Moreau
Here's a status update:
We just started publishing early builds of the new devo cli that we intend to use for the SecretSpec integration. It's not listed or announced anywhere, just search for "Devolutions.Cli" in https://devolutions.net/productinfo.json and find the build for your platform.
You can call "devo help" to see all the commands. If you launch "devo provider" the executable will use the WIP IPC protocol from SecretSpec, but you need to build SecretSpec from a development branch, and the IPC protocol will change before being stabilized. I'm in touch with Domen from SecretSpec about the IPC interface, it will allow SecretSpec to integrate with the devo cli without making custom wrappers for the devo cli commands itself.
So, not yet ready for easy consumption, but we're unblocking part of it on our side, and we keep collaborating with SecretSpec on the integration
Marc-André Moreau