/secret-yaml

Lightweight tool to encrypt yaml values, which you can quickly install right inside your pipeline

Primary LanguageGoMIT LicenseMIT

secret-yaml

Maintainability Coverage Status Build Status GoDoc Go Report Card FOSSA Status

Goal

Lightweight tool to encrypt yaml values, which you can quickly install right inside your pipeline. Usable when you don't need centralized secrets management.

Install

export OS=$(uname | tr '[:upper:]' '[:lower:]')
curl -LsSo /usr/local/bin/syml https://github.com/antonmarin/secret-yaml/releases/latest/download/syml-$OS
chmod +x /usr/local/bin/syml

Usage

  • export SYML_SECRET=$(syml generateSecretKey) generate secret and store inside env variable
  • syml encrypt --secret=${SYML_SECRET} ~/decryptedSecrets/secret.yaml > ~/encryptedSecrets/secret.yaml encrypt values inside yaml-file and save to new file
  • syml decrypt --secret=${SYML_SECRET} ~/encryptedSecrets/secret.yaml > ~/decryptedSecrets/secret.yaml decrypt values inside yaml-file and save to new file

asciicast

syml help to get more about usage