Search

Local protected secret store. Provider keys and other credentials are encrypted under a master key kept outside the project (secret://NAME) or kept as variables in the project's .env (env://NAME), referenced from versioned configuration and resolved only by the workers each secret allowlists; metadata reads never return a value, and the secrets::changed trigger reports rotations and .env edits.

binary·Supported platforms: macOS: arm64, x64 · Linux: arm64, armv7, x64 · Windows: arm64, x64·10 functions·credentialssecrets+2·iii