Gitiles - git.j3ss.co
git.j3ss.co / pony / 85eae5c983a80fe09db43d2dc7d89c7e0c05dd5e
commit85eae5c983a80fe09db43d2dc7d89c7e0c05dd5e[log] [tgz]
authorJess Frazelle <acidburn@microsoft.com>Tue Sep 25 13:20:01 2018 -0400
committerJess Frazelle <acidburn@microsoft.com>Tue Sep 25 13:20:01 2018 -0400
tree79bcc9425d8518c735d499085a9c88e21c380b99
parent58e0fba338249f61b8bc9a406ad91abacd150380 [diff]
Bump version to v0.2.4

Signed-off-by: Jess Frazelle <acidburn@microsoft.com>
1 file changed
tree: 79bcc9425d8518c735d499085a9c88e21c380b99
  1. .gitignore
  2. .goosarch
  3. .travis.yml
  4. .traviskey
  5. Dockerfile
  6. LICENSE
  7. Makefile
  8. README.md
  9. VERSION.txt
  10. basic.mk
  11. create.go
  12. get.go
  13. go.mod
  14. go.sum
  15. gpg/
  16. list.go
  17. main.go
  18. main_unix.go
  19. main_windows.go
  20. remove.go
  21. store.go
  22. vendor/
  23. version/
README.md

pony

Travis CI GoDoc

Local file-based password, API key, secret, recovery code store backed by GPG.

Installation

Binaries

For installation instructions from binaries please visit the Releases Page.

Via Go

$ go get github.com/jessfraz/pony

Usage

$ pony -h
pony -  Local File-Based Password, API Key, Secret, Recovery Code Store Backed By GPG.

Usage: pony <command>

Flags:

  -d, --debug  enable debug logging (default: false)
  --file       file to use for saving encrypted secrets (default: ~/.pony)
  --keyid      optionally set specific gpg keyid/fingerprint to use for encryption & decryption (or env var PONY_KEYID)

Commands:

  create   Create a secret.
  get      Get details for a secret.
  ls       List secrets.
  rm       Delete a secret.
  version  Show the version information.

Best Practices

HISTIGNORE

You should obviously add pony to your HISTIGNORE for example:

export HISTIGNORE="ls:cd:cd -:pwd:exit:date:* --help:pony:pony *";

Namespacing Keys

You should namespace the keys for your secrets like the following:

$ pony create com.twitter.frazelledazzell.token KJDHJKFHDSBJDF
# GPG Passphrase for key "Jess Frazelle <butts@systemd.lol>":

$ pony create com.github.jessfraz.token LKJHSDLFKJDHF
# GPG Passphrase for key "Jess Frazelle <butts@systemd.lol>":

# if a key ends with `.recovery`
# we assume it is a list of comma seperated
# strings that are recovery codes
$ pony add com.github.devnull@butts.com.recovery we0wk4,osdknew,4fd9kw,03jfn23,sduj39s
# GPG Passphrase for key "Jess Frazelle <butts@systemd.lol>":

$ pony ls
# GPG Passphrase for key "Jess Frazelle <butts@systemd.lol>":

KEY                                     VALUE
com.aws.amazon.prod.key                 KSUIIUEJDMSDBSDJFOFR
com.aws.amazon.prod.secret              skljdUYGjsndhfjjiosjdfgr/HKKSU
com.github.botaccount.recovery          we0wk4,osdknew,4fd9kw,03jfn23,sduj39s
com.github.jessfraz.token               LKJHSDLFKJDHF
com.twitter.frazelledazzell.token       KJDHJKFHDSBJDF

# you can also filter by a regular expression
$ pony ls --filter com.github*
# GPG Passphrase for key "Jess Frazelle <butts@systemd.lol>":

KEY                                     VALUE
com.github.botaccount.recovery          we0wk4,osdknew,4fd9kw,03jfn23,sduj39s
com.github.jessfraz.token               LKJHSDLFKJDHF