cargo-credential-pass

A Cargo credential provider for pass.

• No config needed[^cargo]
• Stores encrypted tokens in your password store with all your other secrets
• Automatically encrypts using your password store GPG key
• Works great with keys stored on HSMs too (hello YubiKey!)

Because no one likes plaintext credentials on disk :(

Use It

1. Install cargo-credential-pass:

% cargo install --locked cargo-credential-pass

2. Configure Cargo to use this credential provider:

[registry]
global-credential-providers = ["cargo-credential-pass"]

3. Login! cargo login will pop up your editor - paste your registry token and close the window.

Your token will now be stored as an encrypted text file in $PASSWORD_STORE_DIR/cargo-registry/<registery-name>.token.

That's it - you're good to go!

[^cargo]: Kinda - just cargo!