Tier 1 (cre demo): in-memory SQLite + tempfile .env rotator. Walks through inventory -> before -> 4-step rotation -> after -> audit chain verify. Narrates every step event live with green/red glyphs. Runs in under 1 second on commodity hardware, no external deps. Tier 2 (docker/docker-compose.yml): postgres:16, localstack (secretsmanager), hashicorp/vault dev mode, plus a fake-GitHub Flask app that mocks /user, POST/DELETE /user/personal-access-tokens. config/demo-full.cr.example documents env vars for the full stack. Also fixed env_file rotator newline preservation (lines(chomp: true) + explicit \n join) so the rotated file is properly delimited. |
||
|---|---|---|
| .. | ||
| .github/workflows | ||
| config | ||
| docker | ||
| spec | ||
| src | ||
| .editorconfig | ||
| .gitignore | ||
| LICENSE | ||
| Makefile | ||
| README.md | ||
| shard.lock | ||
| shard.yml | ||
README.md
Credential Rotation Enforcer (cre)
A Crystal-based daemon that tracks and enforces credential rotation
policies across AWS Secrets Manager, HashiCorp Vault, GitHub fine-grained
PATs, and local .env files.
Full README, asciinema demos, and walkthrough live in
learn/. This README will be expanded in Phase 16 of the build.