This release adds 1 notable feature for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+10 more
Summary
AI summaryMigrated to a Pure Go SQLite driver enabling CGO‑free builds.
Full changelog
secretctl v0.8.3
The simplest AI-ready secrets manager.
Installation
macOS / Linux (Homebrew) - Recommended
brew install forest6511/tap/secretctl
Windows (Scoop)
scoop bucket add secretctl https://github.com/forest6511/scoop-bucket
scoop install secretctl
Manual Installation
macOS (Apple Silicon)
curl -LO https://github.com/forest6511/secretctl/releases/download/v0.8.3/secretctl_0.8.3_darwin_arm64.tar.gz
tar xzf secretctl_0.8.3_darwin_arm64.tar.gz
sudo mv secretctl /usr/local/bin/
macOS (Intel)
curl -LO https://github.com/forest6511/secretctl/releases/download/v0.8.3/secretctl_0.8.3_darwin_amd64.tar.gz
tar xzf secretctl_0.8.3_darwin_amd64.tar.gz
sudo mv secretctl /usr/local/bin/
Linux (x86_64)
curl -LO https://github.com/forest6511/secretctl/releases/download/v0.8.3/secretctl_0.8.3_linux_amd64.tar.gz
tar xzf secretctl_0.8.3_linux_amd64.tar.gz
sudo mv secretctl /usr/local/bin/
Windows
# Download and extract
Invoke-WebRequest -Uri "https://github.com/forest6511/secretctl/releases/download/v0.8.3/secretctl_0.8.3_windows_amd64.zip" -OutFile secretctl.zip
Expand-Archive secretctl.zip -DestinationPath .
# Move to PATH or run directly
Verify Installation
secretctl version
Verify Download (checksums)
curl -LO https://github.com/forest6511/secretctl/releases/download/v0.8.3/checksums.txt
sha256sum -c checksums.txt --ignore-missing
Changelog
Bug Fixes
- aff66c506ab7aab147d552647d0399033c325445: fix: migrate to Pure Go SQLite driver for CGO-free builds (#140) (@forest6511)
Full Changelog: https://github.com/forest6511/secretctl/blob/main/CHANGELOG.md
Documentation: https://forest6511.github.io/secretctl/
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About forest6511/secretctl
AI-safe secrets manager with MCP integration. Run commands with credentials injected as environment variables - AI agents never see plaintext secrets. Features output sanitization, AES-256-GCM encryption, and Argon2id key derivation.
Related context
Related tools
Beta — feedback welcome: [email protected]