# GoogleCloudPlatform/berglas

A tool for managing secrets on Google Cloud

Repository: https://github.com/GoogleCloudPlatform/berglas
Canonical: https://ross.abutalabs.com/products/berglas
Homepage: https://cloud.google.com/secret-manager
Language: Go
License: Apache-2.0
License Family: permissive
Topics: google-cloud, gsecrets, secrets-management, secret-management, google-cloud-storage, google-cloud-kms
Last push: 2026-08-17T16:15:46+00:00

## Health v2 (maintenance only)
Score: 94/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 98, release rhythm 86, longevity 100
- inputs: {"age_days": 2701, "days_push": 16, "days_rel": 16, "gap_med": 44.5, "n_releases_24m": 11}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1302, forks 99 (observed 2026-08-28T04:04:18.108177+00:00)

## What it is
Berglas is a command line tool and Go library for managing secrets on Google Cloud, encrypting them with Cloud KMS and storing them in Cloud Storage or Secret Manager. It automates encrypting, decrypting, and injecting secrets into Google Cloud runtimes.

## Use cases
- store encrypted secrets on google cloud
- manage secrets for cloud run services
- encrypt secrets with cloud kms
- inject secrets into environment variables on gcp
- migrate secrets to secret manager
- manage application secrets from the command line

## When to choose
- you run workloads on Google Cloud and need encrypted secret storage
- you want a CLI plus Go library for secret management on GCP
- you need KMS-encrypted secrets in Cloud Storage or Secret Manager

## When to avoid
- you use AWS, Azure, or a multi-cloud setup
- you need a full secrets platform with UI and dynamic secrets like Vault
- you don't use Google Cloud at all

## Facets
- artifact type: cli-tool
- maturity: active
- function: secrets-management, cryptography, cli, security
- domain: security, cloud-computing, developer-tools
- platform: windows, cli, go, cloud
- tags: google-cloud, cloud-kms, cloud-storage, secret-manager, gcp, encryption, devops, linux, macos, docker

## Member repositories
- GoogleCloudPlatform/berglas (main) score 94

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:18.108177+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T04:51:15.429734+00:00, confidence not recorded.
  - readme: https://github.com/GoogleCloudPlatform/berglas (fetched 2026-08-28T04:04:18.108177+00:00, sha acbb12f7cb5a)
  - homepage: https://cloud.google.com/secret-manager (fetched 2026-08-29T12:09:21.756731+00:00, sha 3d8d0c2fbc04)
- Data as of 2026-08-30T08:39:29.467469+00:00.