alternative to HashiCorp Vault, Doppler
OpenBao
Loading the README
- v2.7.22026-10-26auth/cert: Add resolve path canonicalization to CRL paths. GHSA-736f-82w7-hj22. [GH-4323]
- v2.6.52026-10-26auth/cert: Add resolve path canonicalization to CRL paths. GHSA-736f-82w7-hj22. [GH-4325]
- v2.7.12026-10-01core: Prevent disclosure of tls_acme_eab_mac_key from sys/config/state/sanitized. GHSA-3237-j65r-m5rp. [GH-4148]
- v2.6.42026-10-01core: Prevent disclosure of tls_acme_eab_mac_key from sys/config/state/sanitized. GHSA-3237-j65r-m5rp. [GH-4148]
- v2.7.02026-09-23agent, proxy: Ensure the quit endpoint correctly requires the X-Vault-Request header when specified by listener configu…
✓ signed The latest release, v2.7.2, carries a signature GitHub verified.
Loading the security report
- HashiCorp VaultFork of Vault 1.14 under MPL-2.0, same API. Migration notes → Official migration guide ↗Drop-in
- DopplerA secrets engine with an API and CLI, without per-environment syncs to CI and cloud providers.Partial