jbcom/SecretSync
Sync secrets from HashiCorp Vault to AWS Secrets Manager across multiple accounts
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| config | Path to SecretSync configuration file | no | config.yaml |
| targets | Comma-separated list of targets to process | no | "" |
| dry-run | Run without making changes | no | false |
| merge-only | Only run the merge phase | no | false |
| sync-only | Only run the sync phase | no | false |
| discover | Enable dynamic target discovery from AWS Organizations/Identity Center | no | false |
| output-format | Output format: human, json, github, compact, side-by-side | no | github |
| compute-diff | Compute and show diff even when not in dry-run mode | no | false |
| exit-code | Use exit codes: 0=no changes, 1=changes, 2=errors | no | false |
| continue-on-error | Continue processing remaining targets after an error | no | true |
| parallelism | Maximum concurrent target operations; 0 uses config/default | no | 0 |
| metrics-addr | Metrics server bind address | no | 0.0.0.0 |
| metrics-port | Metrics server port; 0 disables metrics | no | 0 |
| log-level | Logging level: debug, info, warn, error | no | info |
| log-format | Log format: text or json | no | text |
Outputs
| name | description |
|---|---|
| changes | Total changed secrets when diff output is computed |
| added | Secrets that would be added or were added |
| removed | Secrets that would be removed or were removed |
| modified | Secrets that would be modified or were modified |
| unchanged | Secrets with no detected changes |
| zero_sum | true when the computed diff has no changes |