neuron-secret-env

Secret resolver that reads credentials from process environment variables

Overview

neuron-secret-env provides a SecretResolver that reads secret values from the process environment. The SecretSource config must specify a var_name; the resolver looks up that variable and returns its value as a SecretLease.

Best for: local development, CI pipelines, and container environments where secrets are injected as environment variables by the orchestration layer (Kubernetes, Docker Compose, etc.).

Usage

[dependencies]
neuron-secret-env = "0.4"
neuron-secret = "0.4"

use neuron_secret_env::EnvResolver;
use neuron_secret::{SecretResolver, SecretSource};
use std::sync::Arc;

let resolver: Arc<dyn SecretResolver> = Arc::new(EnvResolver);

let source = SecretSource::Custom {
    provider: "env".into(),
    config: serde_json::json!({ "var_name": "MY_API_KEY" }),
};
let lease = resolver.resolve(&source).await?;

Part of the neuron workspace

neuron is a composable async agentic AI framework for Rust. See the book for architecture and guides.