secretless

opena2a-org

One command to keep secrets out of AI (LLMs). Works with Claude Code, Cursor, Copilot, Windsurf, and any AI coding tool.

Last commit

4w ago

Branch

main

Language

TypeScript

Stars

Commits (30d)

Open issues

Open PRs

Working tree

clean

Linked todos (0)

No todos linked to this repo.

Recent commits

chore: mark 0.19.1 released (hotfix off v0.19.0); baseline bump

4w ago

fix(hook): full-command parse (no quote-truncation) + vault exec -- env guard (#99) (#102)

4w ago

feat(broker): ML-DSA-65 and hybrid Ed25519+ML-DSA-65 assertion minting (RFC 9964) (#101)

4w ago

release: v0.19.0

4w ago

docs: init now installs 86 deny patterns (env store-dump rule)

4w ago

fix(env): refuse full-store secret dump inside an AI-agent runtime (#100)

4w ago

docs: test badge 1101

4w ago

docs: changelog for 0.19.0

4w ago

fix(setup): coherent --check output when no manifest exists (#98)

4w ago

docs: secrets workflow in README; expand release-smoke to command-surface parity (#96)

4w ago

feat(status): add --json machine-readable output (#95)

4w ago

chore: point published contact email to info@opena2a.org (#94)

1mo ago

feat(broker): strict-parse grant request bodies; bump @opena2a/atx-verify to 0.3.0 (#93)

1mo ago

fix(broker): mint trust_class from the matched policy clause, not the scope (#92)

1mo ago

docs: cross-link aicomply in Links section (#91)

1mo ago

Consume @opena2a/atx-verify in broker; remove bundled verifier copy (#90)

1mo ago

feat: disclose scope on 'secret list' and 'verify' (#89)

1mo ago

feat(cli): honor SECRETLESS_CLI_PREFIX in help, banner, hints, and secret/scope usage (#191) (#88)

2mo ago

test(verify): make the live-API liveness step opportunistic, not a hard 2xx assert (#87)

2mo ago

chore(deps): @opena2a/credential-patterns 0.1.2 + lockstep sync (aws-secret) (#86)

2mo ago

0.18.3

2mo ago