Company
Date Published
Author
-
Word count
1922
Language
English
Hacker News points
None

Summary

Dagger 0.5 introduces a new dynamic secrets API that enables retrieving secrets from external sources such as Hashicorp Vault, Scaleway, GCP, Azure, AWS, and others. The new API allows users to set secrets in their Dagger pipelines either as environment variables or as mounted secret files. This provides a secure way to manage confidential information such as passwords, API keys, SSH keys, and more. The new API also improves security by scrubbing secrets from logs and providing file secrets that are not part of the image or cache. With this update, users can now implement dynamic secrets workflows with Dagger without relying on insecure hacks. The development team plans to further improve the secrets API, including enhancing the scrubbing strategy and giving users more control over secret mounts.