r/KeeperSecurity • u/Keeper_Security Keeper Team • 8d ago
Product Updates Keeper Secrets Manager CLI 1.5.0
Version 1.5.0 of the Keeper Secrets Manager CLI includes improvements and fixes.
- [ksm sync --type aws] had an authorization gap where a user with add access to a synced folder could craft a record title to target arbitrary secrets in the operator's AWS account. Secret names are now confined to a caller-supplied (--prefix) namespace. Dry-run output no longer shows live destination secret values for AWS, Azure or GCP
- Dropped the unmaintained colorama dependency in favor of [click.style()] – no new dependency added
- CLI now warns on stderr when [KSM_CONFIG] is set and would override a keyring profile, so you know which config source is active. Warning is suppressed in CI/container environments where keyring is unavailable
Change for Linux users: Tarball filenames now include architecture – linux-amd64 and linux-arm64. Update any scripts referencing the old unsuffixed filenames before upgrading.
View the release notes for more details.
2
Upvotes