Versions in this module Expand all Collapse all v0 v0.1.3 Jul 4, 2026 v0.1.1 Jun 25, 2026 Changes in this version + const AWSAudience + const ServiceName + var ErrKeychainUnavailable = fmt.Errorf("credentials: OS secret store unavailable") + var ErrNoOIDC = errors.New("credentials: not running in GitHub Actions (no OIDC)") + var ErrNotFound = errors.New("credentials: not found") + func APIKeysMap(ctx context.Context, store Store) map[string]string + func AccountForEnv(envKey string) string + func CachedKeychainWriteAvailable(ctx context.Context) (ok bool, detail string) + func DeleteSecret(ctx context.Context, envKey string) error + func DetectGitHubActions() bool + func EnvForAccount(account string) string + func ExchangeForAWS(ctx context.Context, roleARN, region, oidcToken string) (accessKeyID, secretKey, sessionToken string, err error) + func ExchangeForAWSWith(ctx context.Context, roleARN, region, oidcToken string, ep AWSEndpoints) (accessKeyID, secretKey, sessionToken string, err error) + func ExchangeForGCP(ctx context.Context, audience, serviceAccountEmail, oidcToken string) (accessToken string, err error) + func ExchangeForGCPWith(ctx context.Context, audience, serviceAccountEmail, oidcToken string, ...) (accessToken string, err error) + func FetchGitHubOIDCToken(ctx context.Context, audience string) (string, error) + func FormatStorageReport(r StorageReport) string + func HasSecret(ctx context.Context, envKey string) bool + func KeychainUnavailableDetail() error + func KeychainWriteAvailable(ctx context.Context) (ok bool, detail string) + func KeyringUnavailableHelp() string + func LookupSecret(ctx context.Context, envKey string) string + func MigrateLegacyEnvFile(ctx context.Context) (int, error) + func MigrateLegacyKeychainAccounts(ctx context.Context) (int, error) + func PlatformSecretStoreName() string + func ResetKeychainWriteCache() + func ScrubProcessEnv(envKeys []string) + func SetDefaultStore(s Store) + func StorageStatus(ctx context.Context) (ok bool, detail string) + func StoredEnvKeys(ctx context.Context) []string + func VertexTokenFromOIDC(ctx context.Context, audience, serviceAccountEmail string) (string, error) + type AWSCredentials struct + AccessKeyID string + Region string + SecretAccessKey string + SessionToken string + func BedrockCredentialsFromOIDC(ctx context.Context, roleARN, region string) (AWSCredentials, error) + type AWSEndpoints struct + HTTPClient *http.Client + STSURL string + type CombinedStore struct + Keychain Store + func NewCombinedStore() *CombinedStore + func (c *CombinedStore) Delete(ctx context.Context, account string) error + func (c *CombinedStore) Get(ctx context.Context, account string) (string, error) + func (c *CombinedStore) Set(ctx context.Context, account, secret string) error + type GCPEndpoints struct + HTTPClient *http.Client + IAMCredentialsHost string + STSURL string + type MapStore struct + Data map[string]string + func (m *MapStore) Delete(ctx context.Context, account string) error + func (m *MapStore) Get(ctx context.Context, account string) (string, error) + func (m *MapStore) Set(ctx context.Context, account, secret string) error + type StorageReport struct + KeychainDetail string + KeychainWritable bool + PlatformStore string + StoredEnvKeys []string + func StorageReportFor(ctx context.Context) StorageReport + type Store interface + Delete func(ctx context.Context, account string) error + Get func(ctx context.Context, account string) (string, error) + Set func(ctx context.Context, account, secret string) error + func DefaultStore() Store
Go to main page