SecretHub

SecretHub is a developer tool that aims to simplify the management of SSH keys, API tokens, and other infrastructure secrets throughout the software development life cycle. According to the vendor, SecretHub is suitable for companies of all sizes, from startups to large enterprises, and is used by software developers, DevOps engineers, IT administrators, security professionals, and technology companies across various industries.

Key Features

SSH Key Management: According to the vendor, SecretHub allows users to generate and store SSH keys in 1Password. It also offers a built-in SSH agent for authenticating Git and SSH workflows. Additionally, users can authenticate SSH keys using biometrics and remove vulnerable keys from their disk.

API Token Management: SecretHub provides a way to securely store API access tokens in 1Password. Users can authenticate third-party CLIs with biometrics using 1Password Shell Plugins. The community project allows users to build custom Shell Plugins. Moreover, users can directly access API keys in workflows and scripts with 1Password CLI.

Secrets Management in Code: SecretHub enables users to store secrets in encrypted vaults in 1Password. According to the vendor, users can access secrets in their code with references that are replaced at runtime. Users can also leverage 1Password for VS Code and other IDE integrations to access secrets. The product aims to help users keep secrets out of code and securely access them in their applications.

Automated Workflows: SecretHub offers automation of administrative workflows through 1Password CLI. Users can provision users, manage permissions, and generate custom reports. The product also provides pre-built integrations to sync secrets to CI/CD environments. Users have the flexibility to create custom integrations using 1Password CLI and SDKs.

CI/CD Integration: SecretHub allows users to secure secrets in 1Password instead of adding plaintext secrets in CI/CD configurations. Users can reference secrets within their pipeline using pre-built integrations for CircleCI, GitHub Actions, and Jenkins. The product also offers automatic rotation of secrets in 1Password to update them in the CI/CD environment. Users can centralize secrets management and reduce secrets sprawl with service accounts.

Provisioning Infrastructure Secrets: According to the vendor, SecretHub provides a secure way to orchestrate and manage infrastructure secrets. Users can automatically load secrets into server applications and beyond. The product allows users to load secrets into configuration files that can be safely checked into source control. Additionally, users can programmatically provision secrets at scale via a REST API.