Consume long the Content, and the Content will also consume thee
6935 stories
·
112 followers

Introducing 1Password for Visual Studio Code

1 Comment and 2 Shares
Introducing 1Password for Visual Studio Code

In writing software, we’re used to embedding secrets and other configurable values right in the codebase. They might be Stripe keys to power your online shop, webhooks for a custom Slack bot, a Docker username and password for a CI config, AWS credentials, or an API token and host to set up 1Password Connect.

Secrets are used everywhere in our code. Sometimes, though, we forget when we’ve been using real secrets in our work. Maybe there’s a leftover token you dropped in to build that one feature, or maybe you didn’t delete the .env file you set up to test drive the app. Now you’ve got to rotate your secrets because you accidentally committed and pushed sensitive values for the whole world to see. Yikes.

We’ve all been there. That’s why I’m delighted that I get to announce the launch of the all-new 1Password for VS Code extension.

Go ahead, commit your secrets references

With 1Password Secrets Automation, the 1Password Developer Products team introduced the concept of secret references. It starts by storing a sensitive value, such as an API credential or client ID, in 1Password. That item and the field you’d like to get the value from can then be retrieved through a special op:// URL scheme that 1Password’s tooling knows how to parse. It’s made up of three parts: vault, item, and field. This is known as a “secret reference”.

1Password Secret Reference example consisting of vault, item, and field 1Password Secret Reference example consisting of vault, item, and field

Now, instead of using a real value in your configs, environment variable files, or anywhere else in the codebase, just drop in the secret reference in VS Code. When you do, you can rest easy knowing that the real value will never accidentally make its way into your codebase.

The best part? Through our suite of tools and integrations, you can work with references in both local and deployed environments.

To help make sure you’re not accidently leaving secrets in your code, you can move them over to 1Password with just a couple clicks. The extension uses a series of secret detection techniques to look for values that might be sensitive. With these matches, it makes inline suggestions to store them in 1Password, automatically replacing them with secret references.

Secret reference integration doesn’t stop there. You can hover a reference to inspect the item and field details, click it to open the item in the desktop app, and even preview the real values of an entire file full of references.

Beyond secret detection suggestions, 1Password for VS Code makes it easy to retrieve items for use in your code, as well as store any bits of code you’d like in 1Password. If you’ve got multiple values you want stored in the same item – perhaps a username, password, and email – it supports that as well. Just select each value and run the “Save in 1Password” command.

Built using tools available to everyone

I’ll let you in on a little secret: we didn’t plan to build this extension. It wasn’t requested by our developer community, and wasn’t part of any roadmap. Instead this extension began as a side project for myself. I wanted to scratch my own itch and integrate 1Password more closely into my development workflow, and to generally learn more about developing with 1Password.

So you can imagine my excitement when, after a quick demo at an internal call, I was invited to polish it up and get it slated for release.

To my delight, after demoing the extension and then going on vacation, Dave posted a video of the presentation from his CLI launch blog post and it was met with some pretty wild enthusiasm from the developer community. There was even some love for it at our 1Password 8 for Mac Reddit AMA:

Reddit comment from user arnebr asking if the VS Code plugin will be live soon

Although not a goal from the outset, an interesting aspect of this project is that it’s built using only tools available to the public – there’s nothing internal or proprietary powering the features of the extension. We’ve even open-sourced the whole project on our GitHub, so if you want to help iterate on it or report an issue, that’s a great place to start.

Ultimately my hope is that this extension demonstrates some of the neat ways you can extend the power of 1Password by building your own integrations, whether it be for yourself or others. And you should have fun doing it. We’re in early days here, with plenty more developer offerings coming down the line.

I’d love to hear what you think, and we’ll be iterating on the extension as feedback rolls in. Learn more about 1Password for VS Code and our other developer tools by checking out our developer portal. While you’re there, consider joining our Developer Slack workspace, where you’ll find myself and others on the Developer Products team who are eager to hear how you’re incorporating 1Password into your development workflow. And if you’re building something cool, be sure to tag it #BuildWith1Password!

Finally, we owe a tremendous debt of gratitude to Mike Selander, Chris Dunn-Birch, Floris van der Grinten, the incredibly helpful folks over in the VS Code Extension community, and so many more for providing endless help and guidance while working on this project. Thank you!

Read the whole story
DMack
11 days ago
reply
neato
Victoria, BC
Share this story
Delete

pic.twitter.com/imOhCrg0xD

1 Share
Read the whole story
DMack
16 days ago
reply
Victoria, BC
Share this story
Delete

pic.twitter.com/exYp0d3iJk

1 Share
Read the whole story
DMack
16 days ago
reply
Victoria, BC
Share this story
Delete

pic.twitter.com/fxXxdmqHTO

1 Comment
Read the whole story
DMack
17 days ago
reply
tokyo's only public garbage can: out of service due to the pandemic
Victoria, BC
Share this story
Delete

This is obviously a very sad story, but WHAT in the passive voice hell is this part of the headline? twitter.com/timescolonist/… pic.twitter.com/Us2U1GDsB9

1 Comment

This is obviously a very sad story, but WHAT in the passive voice hell is this part of the headline? twitter.com/timescolonist/… pic.twitter.com/Us2U1GDsB9

Person murdered, suspected killer found dead after police fire their weapons in Campbell River timescolonist.com/local-news/per…




2 likes




7 likes, 2 retweets
Read the whole story
DMack
20 days ago
reply
lmao
Victoria, BC
fxer
19 days ago
The weapons cleared away the water coving the suspected killer’s dead body
Share this story
Delete

The State Finally Letting Teens Sleep In

1 Comment

Article URL: https://www.theatlantic.com/family/archive/2022/06/american-high-school-later-start-time/661211/

Comments URL: https://news.ycombinator.com/item?id=31711020

Points: 290

# Comments: 358

Read the whole story
DMack
20 days ago
reply
will they become the first generation of adults without absolute dirt for brains? or will the microplastics get 'em first
Victoria, BC
fxer
19 days ago
thoughts and prayers for a CRT vaccine
Share this story
Delete
Next Page of Stories