
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
nautobot-secrets-providers
Advanced tools
Nautobot Secrets Providers is an app for Nautobot that bundles Secrets Providers for integrating with popular secrets backends.
This app publishes secrets providers that are not included in the Nautobot core software package so that it will be easier to maintain and extend support for various secrets providers without waiting on Nautobot software releases.
This app supports the following popular secrets backends:
Secrets Backend | Supported Secret Types | Supported Authentication Methods |
---|---|---|
1Password | Hosted Password Management | Service Account Token |
AWS Secrets Manager | Other: Key/value pairs | AWS credentials (see Usage section below) |
AWS Systems Manager Parameter Store | Other: Key/value pairs | AWS credentials (see Usage section below) |
Azure Key Vault | Key Vault Secrets | Entra ID Service Principal |
Delinea/Thycotic Secret Server | Secret Server Cloud Secret Server (on-prem) | Access Token Authorization Domain Authorization Password Authorization |
HashiCorp Vault | K/V Version 2 K/V Version 1 | Token AppRole AWS Kubernetes |
More screenshots can be found in the Using the App page in the documentation. Here's a quick overview of some of the app's added functionality:
Full web-based HTML documentation for this app can be found over on the Nautobot Docs website:
You can find all the Markdown source for the App documentation under the docs folder in this repository. For simple edits, a Markdown capable editor is sufficient - clone the repository and edit away.
If you need to view the fully generated documentation site, you can build it with mkdocs. A container hosting the docs will be started using the invoke commands (details in the Development Environment Guide) on http://localhost:8001. As your changes are saved, the live docs will be automatically reloaded.
Any PRs with fixes or improvements are very welcome!
For any questions or comments, please check the FAQ first. Feel free to also swing by the Network to Code Slack (channel #nautobot
), sign up here if you don't have an account.
FAQs
Nautobot Secrets Providers App
We found that nautobot-secrets-providers demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.