infamousjoeg / cybr-cli

A "Swiss Army Knife" command-line interface (CLI) for easy human and non-human interaction with @CyberArk suite of products.
Apache License 2.0
71 stars 15 forks source link

Option to store cybr-cli config in keychain/keyring/cred mgr #139

Open infamousjoeg opened 2 years ago

infamousjoeg commented 2 years ago

Is your feature request related to a problem? Please describe. The problem can be that storing config on the local filesystem can be vulnerable. Session tokens are stored in it for Privilege. A conjur.conf and .netrc are created for Conjur.

Describe the solution you'd like Placing this information inside a secured store can help to reduce the potential attack surface for a developer or operator. Mac OSX Keychain, Linux Keyring, Windows Credential Manager, with extensibility possibilities to other 3rd party tools such as Conjur, wincred, and more.

Describe alternatives you've considered An attempt was made to create the config as a binary that is only readable by the CLI client, however this can still be de-obfuscated and is just security through obscurity.