I wrote a Secret & Environment Manager in Rust, I'd love your feedback

Hey Rustaceans!

Novops is a CLI to load secrets and environment variables securely for development and CI. It's different than other "dev secret manager" as secrets are never written to disk (kept in-memory for only as long as they're needed) and can be loaded from any sources: Hashicorp Vault, AWS/GCP/Azure Secret Manager, etc.

🔗 Link: https://github.com/PierreBeucher/novops

I wrote Novops as I was tired of spreading my secrets and env variables across tools and CI configs. Existing tools are either mostly static (can't generate temporary secrets like AWS Role creds or require some kind of syncing) or too specific (like aws-vault which only works for AWS). Novops aim to be flexible, dynamic and source-agnostic.

I'd love to hear your comments and feedbacks, both on Rust code itself and on the features provided.

Thanks in advance !

EDIT: thanks all for your feedbacks, I rewrote the security model to specify Novops goals and limitations (file permissions, swap, root user, etc.) and will work on ways to further protect secrets from same-user processes and in memory.