Struct Secret 

pub struct Secret {
    pub resolver: String,
    pub command: String,
    pub args: Vec<String>,
    pub op_ref: Option<String>,
    pub extra: HashMap<String, Value>,
}

Secret definition with resolver

This is the CUE-compatible secret type used for Dagger secrets and environment variable resolution. Supports multiple resolver types:

• exec: Execute a command to get the secret
• onepassword: Resolve from 1Password using ref field
• aws, gcp, vault: Cloud provider secrets

Resolution is delegated to the trait-based SecretResolver system.

Fields

resolver: String

Resolver type: “exec”, “onepassword”, “aws”, “gcp”, “vault”

command: String

Command to execute (for exec resolver)

args: Vec<String>

Arguments to pass to the command (for exec resolver)

op_ref: Option<String>

1Password reference (for onepassword resolver), e.g., “op://vault/item/field”

extra: HashMap<String, Value>

Additional fields for extensibility

Implementations

impl Secret

pub fn new(command: String, args: Vec<String>) -> Self

Create a new exec secret

pub fn onepassword(reference: impl Into<String>) -> Self

Create a 1Password secret

pub fn with_extra( command: String, args: Vec<String>, extra: HashMap<String, Value>, ) -> Self

Create a secret with additional fields

pub fn provider(&self) -> &str

Get the resolver/provider name

pub fn to_spec(&self) -> SecretSpec

Convert to a SecretSpec for use with the trait-based resolver system

pub async fn resolve(&self) -> Result<String>

Resolve the secret value using the trait-based resolver system

Uses the default registry with all built-in resolvers.

Errors

Returns error if resolution fails

pub async fn resolve_with_registry( &self, registry: &SecretRegistry, ) -> Result<String>

Resolve the secret value using a custom registry

Errors

Returns error if resolution fails

Trait Implementations

impl Clone for Secret

fn clone(&self) -> Secret

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Secret

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Secret

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for Secret

fn eq(&self, other: &Secret) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for Secret

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for Secret

impl StructuralPartialEq for Secret