Vault
Securely store secrets used in scripts
Scripts often call external APIs that use keys or other secret values that should not be visible to users. To solve this problem, InSkill Vault stores key/values in a secure store that protects them while allowing their use in scripts.
For example, a secret in the Vault may be API_KEY with the actual value stored in it. In a script, that name has the value substituted into it when the script runs. To keep the secret, if the script does any logging, the secret is redacted back to the name. This way logging from scripts is visible to many users but does not leak secret information. If scripts are changed, the script author does not see the secrets. Also, if an API_KEY is changed, updating the Vault secret does not require touching any of the scripts that may depend on it.
The Vault is only visible to roles Account Administrator and Script Author. Only they can see the Vault tab. The view lists the entries alphabetically by Name, with Description, Created date, Last Used indicates when a script ran that used the secret, and the number of scripts that contain the secret. The expand button shows where there are scripts that use the secret.
The Create New form requires a name with at least 5 characters, must start with a letter and be made up of characters, numbers and _ underbar. The name is uppercase and anything typed into the name field is converted into these legal characters. The optional Description can remind you of its use. The required Value can be any string. Values are redacted from script output but when shorter than 8 characters they are not redacted.
You can update a secret, but the name cannot change once it is created. The Description and Value can be updated or leave Value blank to keep it. A secret that is used in scripts cannot be deleted, the scripts must be updated first.
Some Names are not allowed, like STATUS, RESULT, ERROR, CONFIG, OUTPUT, RETURN, WINDOW, STRING, NUMBER, OBJECT because they conflict with keywords in the language.
The vault is encrypted at rest, and only used in scripts when they run.
Updated about 6 hours ago