Using gopass as summon provider

What is summon?

Summon is a command-line tool to inject secrets as environment variables. It is used to execute a process and inject secrets from a separate store. Using gopass can be useful in (local) development

Summon Provider

The gopass repository contains the cmd/gopass-summon-provider tool, that can be used as summon provider.

To make use of gopass-summon-provider to retrieve the test/db-password secret, you can call summon with full provider path

summon -p /usr/local/bin/gopass-summon-provider --yaml 'DBPASS: !var test/db-password' bash -c 'echo $DBPASS'

or link gopass-summon-provider to /usr/local/lib/summon/gopass and just use gopass

summon -p gopass --yaml 'DBPASS: !var test/db-password' bash -c 'echo $DBPASS'

or export SUMMON_PROVIDER=gopass as default provider

summon --yaml 'DBPASS: !var test/db-password' bash -c 'echo $DBPASS'

With the appropriate secrets.yml, it's as easy as running

summon ./my-command-to-run