Quickstart (Python)

Install

pip install secrefs

Bitwarden support is an optional extra, because bitwarden-sdk ships only prebuilt wheels for a fixed set of platforms and a hard dependency would break installing SecRefs at all on the others:

pip install "secrefs[bitwarden]"

Use it

Write a reference

.env

DB_PASSWORD=sec://aws/prod/db#password

Run through the CLI

secrefs-py run -- python app.py

Your app reads os.environ["DB_PASSWORD"] unchanged.

Or call it directly

from secrefs import sec_refs

# Expand everything in os.environ, once, at boot.
await sec_refs.init()

# Or resolve at the point of use - this one picks up rotations.
key = await sec_refs.expand_string("sec://aws/prod/stripe#key")

Parity with Node

The Python package implements the same reference syntax, the same providers, and the same two-entry-point model. Everything in Load time vs use time and Reference syntax applies unchanged — only the method names differ (expand_string rather than expandString).

Getting started

Providers

Guides

Reference

Quickstart (Python)

Install

Use it

Parity with Node

​Install

​Use it

​Parity with Node

Install

Use it

Parity with Node