gcredstash

gcredstash is a reimplementation of credstash in Go.

Like the original, it allows for the management of versioned secrets using AWS Key Management Service (KMS) for encryption/decryption and DynamoDB for storage.

Unlike the original, gcredstash is a standalone binary, making its deployment simpler.

This particular version of gcredstash is a fork of the original by Genki Sugawara, aiming to modernise it, increase its compatibility with the original credstash, and fix bugs.

With the advent of AWS Secrets Manager, both credstash and gcredstash are less useful these days, but if you’re still a heavy user of either, this fork might be for you.