How to securely manage credentials in shell scripts?

1 iMario 2 5/26/2025, 7:19:40 PM

I need to improve security over a set of shell scripts which have hardcoded credentials. I’m wondering what is the state of the art on this subject. I’ve read about gpg, hashicorp vault, pass command, but still wonder what you guys are doing.

Comments (2)

iMario · 23h ago

I have a bunch of scripts and a bunch of sysadmins who do not need to know those credentials but should based on their username be able to use the scripts. Those scripts query specific aspects of network infrastructure up to now via ssh.

bonki · 1d ago

What is your use case? Both vault and pass are viable options.

Beyond Compare (scootersoftware.com)

Dora Research: 2024 (dora.dev)

Before 3D Printing: 19th Century Harvards Hyper-Realistic Glass Flowers (fwtmagazine.com)

MariaDB Acquires Galera Cluster (mariadb.com)

Show HN: AnyClaude – Claude Code with any LLM (github.com)

Arc-NCA: Towards Developmental Solutions to the Abstraction and Reasoning Corpus (arxiv.org)

Concatenative programming and stack-based languages (2023) [video] (youtube.com)

I put 5 years of community writing into NotebookLM. Here's the audio summary [video] (youtube.com)

All of Paul Graham's essays in 100 words and organized (summarygraham.com)

School Expelled a 12-Year-Old for a Social Media Post (propublica.org)

There Are N+1 Hard Things in Computer Science (lukebechtel.com)

In Vietnam, an unlikely outpost for Chicano culture (latimes.com)

They used Xenon to climb Everest in days – is it the future of mountaineering? (nytimes.com)

10biForthOS: A full 8086 OS in 46 bytes (git.sr.ht)

Open Letter Against ProtectEU (tuta.com)

AI Role in College Brings Education Closer to a Crisis Point (bloomberg.com)

I Am an Audience, First and Foremost (ratsfromrocks.substack.com)

Chuuchuu - Train travel, made smart (chuuchuu.com)

Why the Original Macintosh Had a Screen Resolution of 512×324 (512pixels.net)

Building your own Atomic (bootc) Desktop (fedoramagazine.org)

iOS 19 may let you transfer your iPhone's eSIM to an Android phone (androidauthority.com)

What's Next for Qubits? (lanl.gov)

'Crazy' data rules hit German plans to boost army reserve (ft.com)

The 'Man-Eater' Screwworm Is Coming (theatlantic.com)

Reasoning Gym: Procedural Dataset Generation for Reinforcement Learning (github.com)

Apple to Debut Dedicated Gaming App Within Days of Switch 2's Arrival (bloomberg.com)

Julia's Package Registration Tooling (ericphanson.com)

Neural Network Checklist (ekernf01.github.io)

Show HN: Carolina Cloud – the farm-to-table of cloud computing (carolinacloud.io)

How to Create Your Own Meeting Prep Bot with Zapier Agents (ideakitchen.substack.com)

Breaking Down the $524B Investment Needed to Rebuild Ukraine (visualcapitalist.com)

Ultimate Linear Algebra Cheat Sheet (corca.app)

AI agents don't care about your pretty website or tempting ads (theregister.com)

It's possible – but not easy – to ship a package to North Korea (businessinsider.com)

Cromulent (merriam-webster.com)

The Formation of the WordPress AI Team (wordpress.org)

Microsoft open-sources Windows Subsystem for Linux (arstechnica.com)

Pornhub and three other adult websites face EU child safety investigation (theguardian.com)

PHP Views Package – Templating Made Easy with Blade and Model-Driven Approach (prosopo.io)

Water isn't always the best answer to BESS fires (pv-magazine-usa.com)

A Reaction to Alzheimer's Fraud (science.org)

The Un-Marketing Guide: CrossOver vs. Parallels (codeweavers.com)

Trade Crime Is Soaring, U.S. Firms Say, as Trump's Tariffs Incentivize Fraud (nytimes.com)

The Joy of Skateboarding over Brick (dirt.fyi)

Show HN: I made a free web app security platform (ex-StarCraft pro turned dev) (wraithscan.com)

The sun is killing off SpaceX's Starlink satellites (newscientist.com)

Git: Interactive Staging (git-scm.com)

Autocommand · PyPI (pypi.org)

Instant terminal sharing; using Zellij (github.com)

Texas enacts age-verification law for app stores (engadget.com)

How to securely manage credentials in shell scripts?

Comments (2)