[{"_1":2,"_190":-5,"_191":-5},"loaderData",{"_3":4,"_13":14,"_21":22,"_165":166},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","routes/_layout",{"_15":-5,"_16":17,"_18":17,"_19":11,"_20":17},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_23":24,"_25":-5,"_26":11,"_27":11,"_28":29,"_30":31,"_32":-5,"_33":11,"_34":35,"_84":85,"_108":109,"_156":-5,"_157":11,"_158":17,"_159":11,"_160":-5,"_161":11,"_162":-5,"_163":164},"canonicalUrl","https://hub.docker.com/r/secrethub/http-proxy/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","secrethub","reponame","http-proxy","cloudBuildSource","isAutobuildsAvailable","repo",{"_36":37,"_38":39,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":51,"_53":31,"_28":29,"_54":55,"_56":40,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":58,"_65":66,"_67":11,"_68":29,"_69":70,"_75":11,"_76":77,"_81":29,"_82":83},"categories",[],"content_types",[40],"image","date_registered","2019-04-30T08:59:01.094524Z","description","A RESTful interface to the SecretHub Client","is_private","last_updated","2021-04-14T11:21:37.58116Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[52],"application/vnd.docker.container.image.v1+json","name","pull_count",409,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","

\n SecretHub has joined 1Password! Find out more on the SecretHub blog. 🎉\n

\n\n

\n $\"SecretHub\"$ \n

\n HTTP Proxy^BETA\n

\n\n[![GoDoc](https://godoc.org/github.com/secrethub/secrethub-http-proxy?status.svg)][godoc]\n[![CircleCI](https://circleci.com/gh/secrethub/secrethub-http-proxy.svg)][circleci]\n[![Go Report Card](https://goreportcard.com/badge/github.com/secrethub/secrethub-http-proxy)][goreportcard]\n[![Version]( https://img.shields.io/github/release/secrethub/secrethub-http-proxy.svg)][latest-version]\n[![Discord](https://img.shields.io/badge/chat-on%20discord-7289da.svg?logo=discord)][discord]\n\nThe SecretHub HTTP Proxy adds a RESTful interface to the [SecretHub Client](https://github.com/secrethub/secrethub-go). \nApps can this way still use SecretHub, without having to directly include the client as a binary dependency.\n\nYou can configure it with a SecretHub credential at start, thereby removing the need of passing it in on every request. \n\n> [SecretHub](https://secrethub.io) is a developer tool to help you keep database passwords, API tokens, and other secrets out of IT automation scripts.\n\n### A note on security\n\nThe SecretHub HTTP Proxy opens up the configured SecretHub account over HTTP. \nThis moves the responsibility of securing your secrets to the domain of network security, which comes with its own risks. \nSo use this with caution and make sure the credential you pass in only has access to only those secrets it needs. \n\nIt is recommended to [create a service account](https://secrethub.io/docs/reference/service-command/), tightly control it with [access rules](https://secrethub.io/docs/reference/acl-command/), and use the service credential instead of your own SecretHub account.\n\n```\nsecrethub service init my-org/my-repo --permission read --desc my-app\n```\n\n## Installation\n\n### Binary\n\nDownload and extract the [latest release](https://github.com/secrethub/secrethub-http-proxy/releases/latest) of the SecretHub HTTP Proxy. Start it with your SecretHub credential:\n\n```\n./secrethub-http-proxy -C $(cat ~/.secrethub/credential) -p 8080\n```\n\nIf upon signup you've chosen to lock your credential with a passphrase, you will get prompted for your passphrase.\n\n### Docker\n\nYou can also run the proxy as a [Docker container](https://hub.docker.com/r/secrethub/http-proxy). \nAssuming you have a SecretHub credential stored in the default `$HOME/.secrethub` location, you can run it with the credential mounted as a volume:\n\n```\ndocker run -p 127.0.0.1:8080:8080 --name secrethub -v $HOME/.secrethub:/secrethub secrethub/http-proxy\n```\n\nYou can also pass in the credential as an environment variable:\n\n```\ndocker run -p 127.0.0.1:8080:8080 --name secrethub -e SECRETHUB_CREDENTIAL=$(cat $HOME/.secrethub/credential) secrethub/http-proxy\n```\n\nIf upon signup you've chosen to lock your credential with a passphrase, run the container with `-it` to get prompted for your passphrase.\n\n```\ndocker run -it -p 127.0.0.1:8080:8080 --name secrethub -e SECRETHUB_CREDENTIAL=$(cat $HOME/.secrethub/credential) secrethub/http-proxy\n```\n\nAlternatively, the passphrase can be sourced from the `SECRETHUB_CREDENTIAL_PASSPHRASE` environment variable.\n\n## Usage\n\nWith the proxy up and running, you can perform the following HTTP requests:\n\n### `/v1beta/secrets/raw/:path`\n\nExample:\n\n```\n/v1beta/secrets/raw/my-org/my-repo/my-secret\n```\n\n#### `GET`\n\nReturns the secret contents as bytes.\n\n#### `POST`\n\nCreates or updates a secret. Expects the secret contents as bytes.\n\n#### `DELETE`\n\nDeletes the entire secret and its history.\n\n## BETA\n\nThis project is currently in beta and we'd love your feedback! Check out the [issues](https://github.com/secrethub/secrethub-http-proxy/issues) and feel free to suggest cool ideas, use cases, or improvements.\n\nBecause it's still in beta, you can expect to see some changes introduced. Pull requests are very welcome.\n\n## Terraform State Backend\n\nFor those of you using [Terraform](https://www.terraform.io), the SecretHub HTTP Proxy can function as a [Terraform Backend](https://www.terraform.io/docs/backends/index.html) for your `.tfstate`. \nRead more about this on our [blog post]().\n\n## Development\n\nGet the source code:\n\n```\ngit clone https://github.com/secrethub/secrethub-http-proxy\n```\n\nTo build the binary from source, use:\n\n```\nmake build\n```\n\nTo build the Docker image from scratch, you can use:\n\n```\ndocker build -t secrethub-http-proxy .\n```\n\n[godoc]: https://godoc.org/github.com/secrethub/secrethub-http-proxy\n[circleci]: https://circleci.com/gh/secrethub/secrethub-http-proxy\n[discord]: https://discord.gg/NWmxVeb\n[latest-version]: https://github.com/secrethub/secrethub-http-proxy/releases/latest\n[goreportcard]: https://goreportcard.com/report/github.com/secrethub/secrethub-http-proxy\n","has_starred","hub_user","immutable_tags_settings",{"_71":11,"_72":73},"enabled","rules",[74],".*","is_automated","permissions",{"_78":17,"_79":11,"_80":11},"read","write","admin","user","storage_size",25018313,"orgData",{"_86":87,"_88":89,"_90":91,"_92":29,"_93":94,"_95":96,"_97":94,"_98":99,"_100":101,"_102":103,"_104":105,"_106":105,"_107":17},"id","73a242d6a2ed419c91dff5d56c72f92d","uuid","73a242d6-a2ed-419c-91df-f5d56c72f92d","type","organization","orgname","full_name","SecretHub","location","Delft, The Netherlands","company","profile_url","https://secrethub.io/","date_joined","2017-06-28T08:05:13.97907Z","gravatar_url","https://www.gravatar.com/avatar/5e513a9a7b6323a1bc40de21f021c9e4?s=80&r=g&d=mm","gravatar_email","","badge","is_active","recentTags",[110,146],{"_111":40,"_112":113,"_114":115,"_86":116,"_117":118,"_46":135,"_136":113,"_137":29,"_138":52,"_53":139,"_140":141,"_142":126,"_143":135,"_144":62,"_145":17},"content_type","creator",1881830,"full_size",9279422,54118229,"images",[119],{"_120":121,"_122":123,"_124":105,"_125":126,"_127":128,"_129":130,"_131":105,"_132":-5,"_133":115,"_59":62,"_134":-5},"architecture","amd64","digest","sha256:31156fa66e15bf0684d6db73dd033b12dc984400927872519a3b663bb9db0ef7","features","last_pulled","2026-09-26T21:15:40.243318993Z","last_pushed","2021-04-14T11:21:38Z","os","linux","os_features","os_version","size","variant","2021-04-14T11:21:37.307138Z","last_updater","last_updater_username","media_type","latest","repository",7049356,"tag_last_pulled","tag_last_pushed","tag_status","v2",{"_111":40,"_112":113,"_114":147,"_86":148,"_117":149,"_46":154,"_136":113,"_137":29,"_138":52,"_53":155,"_140":141,"_142":152,"_143":154,"_144":62,"_145":17},9242433,54118715,[150],{"_120":121,"_122":151,"_124":105,"_125":152,"_127":153,"_129":130,"_131":105,"_132":-5,"_133":147,"_59":62,"_134":-5},"sha256:d5db7f26c97ab26a5893f5d286d594d039ad0ca18cdb7ffc12286fb4488507f4","2026-09-26T23:27:19.21572618Z","2019-04-30T11:50:56Z","2019-04-30T11:50:55.671529Z","0.1.0","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","showSbxLogoOverride","sbxTrademarkText","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"routes/_layout.r.$namespace.$reponame.tags",{"_34":167,"_174":175,"_163":188,"_189":11},{"_36":168,"_38":169,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":170,"_53":31,"_28":29,"_54":55,"_56":40,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":58,"_65":66,"_67":11,"_68":29,"_69":171,"_75":11,"_76":173,"_81":29,"_82":83},[],[40],[52],{"_71":11,"_72":172},[74],{"_78":17,"_79":11,"_80":11},"tags",{"_176":177,"_178":-5,"_179":-5,"_180":181},"count",2,"next","previous","results",[182,185],{"_111":40,"_112":113,"_114":115,"_86":116,"_117":183,"_46":135,"_136":113,"_137":29,"_138":52,"_53":139,"_140":141,"_142":126,"_143":135,"_144":62,"_145":17},[184],{"_120":121,"_122":123,"_124":105,"_125":126,"_127":128,"_129":130,"_131":105,"_132":-5,"_133":115,"_59":62,"_134":-5},{"_111":40,"_112":113,"_114":147,"_86":148,"_117":186,"_46":154,"_136":113,"_137":29,"_138":52,"_53":155,"_140":141,"_142":152,"_143":154,"_144":62,"_145":17},[187],{"_120":121,"_122":151,"_124":105,"_125":152,"_127":153,"_129":130,"_131":105,"_132":-5,"_133":147,"_59":62,"_134":-5},[],"canDeleteTags","actionData","errors"]

\n HTTP ProxyBETA\n

\n HTTP Proxy^BETA\n

secrethub/http-proxy

Tags for secrethub/http-proxy