strongbox

Securely store secrets at rest using Hashicorp Vault

APACHE-2.0 License

Stars
56
strongbox - v0.2.2 Latest Release

Published by mvisonneau over 2 years ago

Added

  • Release container images to quay.io

Changed

  • Bumped go to 1.17
  • Bumped most dependencies
strongbox - v0.2.1

Published by mvisonneau over 3 years ago

Added

  • Support for stdin input when ciphering
  • Added new tests
  • Release snapcraft packages
  • Release ghcr.io images
  • Publish "edge" artifacts (docker, snapcraft and binaries) for every main commit
  • arm64 container images

Changed

  • Replaced Drone CI with GitHub actions
  • Throw a warning instead of exiting if IPC_LOCK is unsuccessful
  • Updated to go 1.16
  • Refactored codebase following golang best practices
  • Updated all dependencies
strongbox - edge

Published by mvisonneau over 3 years ago

strongbox - 0.2.0

Published by mvisonneau about 4 years ago

Added

  • Support for KV v2
  • Support of ~/.vault-token file for Vault authentication
  • gosec tests as part of the linting process
  • Lock process memory before proceeding to operations with Vault API

Changed

  • Moved logger definition into its own package
  • Moved cli definition into its own package
  • Refactored client instanciations
  • Bumped to yaml.v3
  • Bumped to go 1.15 and goreleaser 0.143.0
  • Refactored the rand function with crypto/rand and base4
  • Fixed newly discovered lint issues
  • Outsourced logger configuration
  • Upgraded urfave/cli to v2
  • Bumped Vault to 1.5.4
  • Switched default branch to main
  • Moved get-secret-path and set-secret-path functions under secret get-path/set-path
  • Removed redundant config path data in statefile
  • Use s5 + Vault engine as ciphering/deciphering mechanism for the local state
strongbox - 0.1.8

Published by mvisonneau over 5 years ago

Added

  • homebrew package release
  • deb package release
  • rpm package release
  • scoop package release
  • freebsd packages

Changed

  • Fixed goimports test not breaking on errors
  • Bumped Vault to 1.1.3
  • Updated go dependencies to their latest versions (2019-07-18)

Removed

  • Replaced gox with goreleaser
strongbox - 0.1.7

Published by mvisonneau over 5 years ago

FEATURES

  • Release binaries are now automatically built and published from the CI

ENHANCEMENTS

  • Optimized Makefile
  • Upgraded Vault in test container to 1.1.0
  • Upgraded dependencies

BUGFIXES

  • Fixed test coverage reports

OTHERS

  • Moved CI from Travis to Drone
strongbox - 0.1.6

Published by mvisonneau over 5 years ago

BUGFIXES

  • Fixed Dockerfile build
  • Fixed Travis CI builds
  • Wait a bit longer for Vault container to be ready in dev-env
  • Removed the IPC_LOCK capability over the build container
  • Fixed the ldflags breaking darwin and windows builds

IMPROVEMENTS

  • Also build for arm64
  • ignore dist folder in git
  • Do not use go mod for build dependencies
  • Tidied go.mod
strongbox - 0.1.5

Published by mvisonneau over 5 years ago

FEATURES

  • Added gox and ghr features to release binaries

BUGFIXES

  • Fixed a panic issue on status and plan command when the Vault path doesn't contain any value

IMPROVEMENTS

  • Updated Travis CI configuration
  • Upgraded Vault to 1.0.3
  • Upgraded to golang 1.12
  • Switched to gomodules
  • Enhanced makefile
  • Updated all dependencies to their latest versions
  • Made the secondary container in dev-env use the same version of Vault
  • Added IPC_LOCK capabilities to the dev-env docker container
  • Upgraded Vault libraries to 0.9.6

OTHERS

  • Updated license to Apache 2.0
strongbox - 0.1.4

Published by mvisonneau over 6 years ago

FEATURES

  • Added a flag to pass sensitive content through stdin - #8
  • New function strongbox transit delete <transit_key_name>

BUGFIXES

  • Lint CI job was failing issue since last commits
  • Fixed a bug while returning an empty transit key list

IMPROVEMENTS

  • Updated dependencies
  • Support Vault 0.9.3 for development env
strongbox - 0.1.3

Published by mvisonneau almost 7 years ago

FEATURES

  • Embedded authentication against Vault using approle auth backend [GH-6]

IMPROVEMENTS

  • Switched base release container from empty (scratch) to busybox in order to be able to use it natively with GitLab CI
strongbox - 0.1.2

Published by mvisonneau almost 7 years ago

FEATURES

  • Implemented a function to rotate transit keys [GH-2]
  • Got a full test environment in Makefile, added Vault container
  • Possibility to generate random passwords on secret writes [GH-4]

IMPROVEMENTS

  • Added links in Changelog
  • Nicer version output
  • Updated CLI, added some flags on secret write and read functions
  • Enhanced functions usage outputs

BUGFIXES

  • Fixed status command on empty Vault Cluster
strongbox - 0.1.1

Published by mvisonneau almost 7 years ago

IMPROVEMENTS

  • Added CHANGELOG.md
  • Updated dependencies

BUGFIXES

  • Fixed Dockerfile
  • Fixed build versioning
strongbox - 0.1.0

Published by mvisonneau almost 7 years ago

FEATURES

  • Dockerfile for building the app
  • Implement the CLI
  • Management of state file
  • Management of Vault transit keys
  • Management of secrets
  • Plan and apply changes on Vault
  • Makefile
  • CI
  • Some unit tests
  • License