Show HN: Keeper – embedded secret store for Go (help me break it)

4 comments

• n0n 4 minutes ago
  Genuine question: what's your thread model? Vault gives time limited Tokens with Network Boundary. Instead of Keeper, i would just use age: # write echo "my secret" | age -r <recipient-pubkey> > secret.age

  # read age -d -i key.txt secret.age
• nonameiguess 1 minute ago
  Keeper is already the name of a popular enterprise secrets store: https://docs.keeper.io/en/user-guides/web-vault

  I haven't used it, don't advocate for it, and have no opinion on either its viability or your product's viability for any specific use case. Mostly I just think it's a bit confusing to have two separate products in a very similar space with the same name.
• modelorona 3 minutes ago
  Name could conflict with Keeper Security
• elthor89 32 minutes ago
  I have been looking for something like this. I know openbao, hashicorp vault.

  But they require to be placed on a separate server, and come with their own infra management.

  Is the idea of this project to embed this into you app, instead of relying on .env or an external vault?