Files
D Yiapanis f87c541298 catalog(pass-secrets): declare the real platform matrix
`platforms: []` is not neutral here. The site renders
`plugin.platforms?.length ? … : "Linux, macOS, Windows"`, so the empty list
advertises this entry as working on Windows, which it never has: `pass` is a
`#!/usr/bin/env bash` script (bash + gpg + git + tree) and the source calls it
through `subprocess.run(["pass", ...])` / `shutil.which("pass")`, neither of
which can execute a script on Windows outside WSL/Cygwin/MSYS2. There is no
`fcntl`/`getuid`/`termios` elsewhere in the path — the bash dependency is the
whole constraint.

`linux` and `macos` are both exercised: the GPG store, `pass init`, and the
`.gpg` subdir walk are the same on either.

Entry-only change: `sha` and `version` are untouched, still `485f105` / 1.0.0.
The platform claim is about the package's capability, not about this pin, and
1.0.0 had the same bash dependency.

Related: #146751 carries the same line as part of the 1.1.0 bump. That PR is
blocked on the `/s` sender-gate rework, which is unrelated to this field, so
landing the one-line correction separately keeps a false OS claim off the
listing in the meantime. Whichever merges first, the other needs a one-line
rebase.
2026-11-05 10:59:56 -08:00

18 lines
1.1 KiB
YAML

name: pass-secrets
repo: https://github.com/dyiapanis/pass-secrets
sha: 485f105150e09dad28461b26b9eca9ffc511b15d
description: "pass (password-store) secret source: resolves secrets from a local, GPG-encrypted, git-tracked password store into environment variables at startup, as a first-class SecretSource beside the built-in Bitwarden and 1Password sources. Stdlib-only (subprocess + pathlib), no Python deps, no network — ever. Config: secrets.pass.{enabled,store_path,subdirs,override_existing,timeout_seconds}. Disclosure — when enabled, shells out to the local pass binary (10 s per entry) for every .gpg entry under the configured store subdirs and injects each as an env var that by default overrides .env and shell values; when enabled, also adds a ~900-char system-prompt note about secret resolution; no network."
maintainer: dyiapanis
tier: community
category: tools
requires_hermes: ">=0.21.4"
docs_url: https://github.com/dyiapanis/pass-secrets#readme
version: "1.0.0"
readme: true
platforms: [linux, macos]
capabilities:
provides_tools: []
provides_hooks: []
provides_middleware: []
requires_env: []