Ask HN: Who is using 1Password for secret management?

https://news.ycombinator.com/item?id=39507280

by nvahalik • 2 years ago

12 4 2 years ago

news.ycombinator.com

I just recently discovered that 1Password has a cli and support for replacing GitHub secret management.

Is anyone using it? Are there any caveats? Service account or proxy setup? Which is best?

oulipo2• 2 years ago

I was thinking about doing this, not sure of the pros/cons. Eg moving all the secrets to 1Password, and having a simple internal cli tool for my team to push them to Github Secrets and/or just access them from 1Password in Github workflows

Interested if others have feedback

nvahalik• 2 years ago

We are looking at the same thing. It seems like a great solution but this is new territory for me and my team.

oulipo2• 2 years ago

There are a few resources there, so I guess it's supported: https://developer.1password.com/docs/cli/secrets-config-file...

https://developer.1password.com/docs/cli/secrets-scripts/

niteshade• 2 years ago

We use both the 1Password CLI and 1Password Connect.

The CLI tool is handy for retrieving secrets from your vaults in the CLI, handy for one-off uses like scripts etc.

The Connect server is more suited for infrastructure secrets and allows you to whitelist which vaults are available through it. You can then use secrets exposed from Connect as part of your Docker image build process on CI, for example.

Ask HN: Who is using 1Password for secret management?

Related Stories