logoalt Hacker News

frizlab • today at 11:46 AM • 1 reply • view on HN

From the example in the Readme, I guess retrieving a token from an API, using a secret fetched from a secure vault that requests a password or TouchID validation.

Not sure if there could be other interesting uses. I can’t think of one anyways.


Replies

alex0ptr • today at 1:47 PM

Yes, exactly. This is especially frustrating when I leave an agent running for a long time and it gets stuck on my build scripts because it's waiting for my approval.

I just want to avoid leaving my credentials and secrets on the filesystem.

EDIT: I use a lot of direnv / mise. So reloading credentials with different values is common.