mopac-bitwarden-go

A 100% Go CLI for Bitwarden / Bitwarden Secrets Manager, replacing the Node bw CLI in supply-chain-sensitive (CMMC L3/TS posture) environments. One static binary, one auditable vendored module tree, no Node runtime.

  • Talks to the Bitwarden Secrets Manager REST API directly with stdlib — NO official SDK (its source-available license is AGPL-incompatible).
  • Machine-account auth (access-token flow) for headless/agent use; human auth flows where needed.
  • Porcelain/plumbing model: bwg get|set|list|sync ... with JSON out for scripting, plain text for humans.
  • Pairs with ukrrs/mopac-keyproxy (placeholder keys to consumers; this CLI is how material gets INTO the vault) but fully standalone.
  • AGPLv3. Part of the MOPAC family; composable by anyone, no org-specific assumptions in code.

Status: specification phase. Building 2026-08-28 onward; reference study of KNEL/KNELSecretsManager in flight tonight.

S
Description
100% Go Bitwarden Secrets Manager CLI. Replaces Node bw CLI. REST not SDK. AGPLv3. MOPAC family, standalone.
Readme AGPL-3.0
88 KiB
Languages
Go 92.8%
Shell 6.8%
Makefile 0.4%