Skip to content

feat: add age provider #174

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
ap-1 wants to merge 4 commits into
base: main
Choose a base branch
from
Open

feat: add age provider #174

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
320919c
feat: add age provider
ap-1 Jul 19, 2026
207e740
docs: document the age provider
ap-1 Jul 19, 2026
7456f58
Merge branch 'main' into feat/age-provider
domenkozar Jul 20, 2026
db728f9
fix: address age provider review feedback
domenkozar Jul 20, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,11 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
## [Unreleased]

### Added
- age provider (`age://`) for storing dotenv-style secret sets in an
age-encrypted file, with ASCII armor by default, team recipient rosters,
direct X25519 and SSH key support, native tagged recipients, and
non-interactive age plugins. Hybrid ML-KEM-768 + X25519 keys are recommended
for new setups to protect stored ciphertext against future quantum attacks.
- Vault / OpenBao JWT/OIDC authentication (`?auth=jwt`) logs in through a
configured Vault role using `VAULT_JWT`, or requests a short-lived OIDC token
automatically in GitHub Actions and Forgejo Actions jobs with `id-token:
Expand Down
Loading
Loading