Adolfo Delorenzo
9170198c6c
- Implement encrypted secrets storage with AES-128 encryption - Add secret rotation capabilities with scheduling - Implement comprehensive audit logging for all secret operations - Create centralized configuration management system - Add CLI tool for interactive secret management - Integrate secrets with Flask configuration - Support environment-specific configurations - Add integrity verification for stored secrets - Implement secure key derivation with PBKDF2 Features: - Encrypted storage in .secrets.json - Master key protection with file permissions - Automatic secret rotation scheduling - Audit trail for compliance - Migration from environment variables - Flask CLI integration - Validation and sanitization Security improvements: - No more hardcoded secrets in configuration - Encrypted storage at rest - Secure key management - Access control via authentication - Comprehensive audit logging - Integrity verification CLI commands: - manage_secrets.py init - Initialize secrets - manage_secrets.py set/get/delete - Manage secrets - manage_secrets.py rotate - Rotate secrets - manage_secrets.py audit - View audit logs - manage_secrets.py verify - Check integrity 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>
70 lines
645 B
Plaintext
70 lines
645 B
Plaintext
# Python
|
|
__pycache__/
|
|
*.py[cod]
|
|
*$py.class
|
|
*.so
|
|
.Python
|
|
venv/
|
|
env/
|
|
ENV/
|
|
.venv
|
|
.env
|
|
|
|
# Flask
|
|
instance/
|
|
.webassets-cache
|
|
|
|
# IDE
|
|
.vscode/
|
|
.idea/
|
|
*.swp
|
|
*.swo
|
|
*~
|
|
|
|
# OS
|
|
.DS_Store
|
|
.DS_Store?
|
|
._*
|
|
.Spotlight-V100
|
|
.Trashes
|
|
ehthumbs.db
|
|
Thumbs.db
|
|
|
|
# Node.js
|
|
node_modules/
|
|
npm-debug.log*
|
|
yarn-debug.log*
|
|
yarn-error.log*
|
|
|
|
# TypeScript
|
|
static/js/dist/
|
|
*.tsbuildinfo
|
|
|
|
# Temporary files
|
|
*.log
|
|
*.tmp
|
|
temp/
|
|
tmp/
|
|
|
|
# Audio files (for testing)
|
|
*.mp3
|
|
*.wav
|
|
*.ogg
|
|
|
|
# Local environment
|
|
.env.local
|
|
.env.*.local
|
|
.env.production
|
|
.env.development
|
|
.env.staging
|
|
|
|
# VAPID keys
|
|
vapid_private.pem
|
|
vapid_public.pem
|
|
|
|
# Secrets management
|
|
.secrets.json
|
|
.master_key
|
|
secrets.db
|
|
*.key
|