secret

Overview ¶

Package secret resolves secret references to plaintext values. Multiple backends are supported; the format of the reference string selects the backend:

• "" — returns the plaintext fallback as-is (dev mode)
• "env:VAR_NAME" — reads from environment variable VAR_NAME
• "file:/path/to/file" — reads the file and trims surrounding whitespace
• "arn:aws:..." — AWS Secrets Manager (cached for 5 min)

New backends can be added here without touching any other code.