A CLI tool to compare two HashiCorp Vault secret paths and output structured diffs.
go install github.com/yourusername/vaultdiff@latestOr build from source:
git clone https://github.com/yourusername/vaultdiff.git
cd vaultdiff
go build -o vaultdiff .Ensure your Vault environment variables are set (VAULT_ADDR, VAULT_TOKEN), then run:
vaultdiff <path-a> <path-b>Example:
vaultdiff secret/data/app/staging secret/data/app/productionSample output:
~ db_password : "hunter2" → "c0rrectH0rse"
+ new_feature : "enabled"
- deprecated_key: "old_value"
| Symbol | Meaning |
|---|---|
~ |
Value changed |
+ |
Key added in path-b |
- |
Key removed in path-b |
| Flag | Description | Default |
|---|---|---|
--format |
Output format: text, json |
text |
--no-color |
Disable colored output | false |
--version |
Print version and exit |
- Go 1.21+
- HashiCorp Vault with a valid token and network access
MIT © 2024 Your Name