I thought running a HashiCorp Vault cluster just to securely pass API keys to production was a bit much. So I built Clef: a tokenless, zero-server secrets manager using Git, SOPS, and KMS envelope encryption. Better security, smaller footprint.

I built a tokenless secrets manager that runs entirely on Git and KMS (No Vault required) James Spears James Spears James Spears Follow Mar 25 I built a tokenless secrets manager that runs entirely on Git and KMS (No Vault required) # showdev # devops # security # opensource Comments Add Comment 3 min read