Skip to Main Content
Talk Intermediate First Talk

Securing Secrets from Dev to Deployment without a backend

Proposal status is Rejected
Session Description

SLV (Secure Local Vault) bridges the gap between local developer environments and secure CI/CD pipelines by offering a lightweight, CLI-first tool for managing secrets without relying on centralized, cloud-hosted secrets managers. This talk will demonstrate how sensitive credentials can leak across development to production workflows and how SLV prevents this through isolated, encrypted vaults, ephemeral secrets injection, and audit-friendly flows. With real-world attack paths as context, we will show how SLV hardens secrets handling from the first line of code to final deployment.

Key Takeaways

  • SLV is a CLI tool written in Go for secure secrets management from dev machines to deployment environments using envelope encryption techniques.

  • Secrets are stored in isolated vaults with zero-knowledge encryption with support for easy key rotation.

  • Integrates with Git, Docker, and Kubernetes to inject secrets at runtime without leaving plaintext traces.

  • Supports pluggable backends (e.g., AWS KMS and GCP KMS).

  • Designed to work offline with full CLI and shell injection workflows.

  • Comes with GitHub Actions support and secure bootstrap scripts for easier dev onboarding.

References

https://slv.sh

Session Categories

Introducing a FOSS project or a new version of a popular project

Which track are you applying for?

Main track

Speakers

Shibly Meeran
Shibly Meeran Senior Manager - Security Engineering | Amagi Media Labs

Shibly Meeran is an Architect and also heads the Security Engineering team at Amagi Media, where he focuses on turning tough security problems into practical, developer-friendly tools. His day-to-day work includes leading secrets-hygiene initiatives and driving the adoption of Secure Local Vault (SLV) across Amagi’s production environments. Known for “building simple tools to solve complex problems,” he brings a pragmatic programmer’s mindset to security architecture and enjoys exploring modern cryptography to keep developer workflows both secure and efficient.

https://github.com/shibme
Keshav Kandasamy
Keshav Kandasamy Lead Security Engineer | Amagi Media Labs

Keshav Kandasamy is a cloud-first security engineer with 8 years securing SaaS and media platforms. Now Lead Security Engineer at Amagi, he drives cloud hardening and incident-response strategy. Earlier, he fortified logistics startup Locus, automated DevSecOps at Atlassian, and rolled out secure-coding programs at Freshworks.

https://github.com/keshavk2