Examples demonstrating Varlock secret-provider plugins:
| Example | Plugin(s) |
|---|---|
| 1password | @varlock/1password-plugin |
| aws | @varlock/aws-secrets-plugin |
| azure | @varlock/azure-key-vault-plugin (+ 1Password for bootstrap creds) |
| bitwarden | @varlock/bitwarden-plugin (+ 1Password for bootstrap creds) |
| gcp | @varlock/google-secret-manager-plugin (+ 1Password for bootstrap creds) |
| infisical | @varlock/infisical-plugin |
| pass | @varlock/pass-plugin |
Note
These examples reference real items in the dmno team's own vaults / secret stores, so they are runnable end-to-end by the team. If you are adapting one of these examples, swap the item references (op://... paths, item UUIDs, project IDs, etc.) for your own.
Each example is exercised by running pnpm exec varlock load in its directory. Values that must not be committed (session tokens, service account tokens) live in each example's gitignored .env.local.