Awesome Open

Project record

OpenBao

OpenBaoManage, store, and distribute secrets, certificates, and encryption keys.MPL-2.0
Field notes / 106OpenBao
I / Function

Manage, store, and distribute secrets, certificates, and encryption keys.

OpenBao runs as a server for storing and distributing secrets, certificates and keys to applications. It stores encrypted key-value secrets, can generate temporary credentials for supported external systems and provides encryption operations without retaining the submitted data. Lease renewal and revocation APIs help applications manage credential lifetimes, with persistent storage backends including disk and PostgreSQL.

OpenBao official documentation · Reviewed 2026-10-27

A green capsule contains nested white sleeves guiding a gold filament through an offset opening.
Awesome Open* · Field recordOpenBaoOP-68186EBB · Folio 106Domain: Infrastructure & DevOps
  1. 01 / Feature noteDynamic credentials

    Generate credentials for supported systems on demand and revoke them when their lease expires.

    Feature source ↗
  2. 02 / Feature noteEncryption service

    Encrypt or decrypt submitted data without storing that data in OpenBao.

    Feature source ↗
II / Repository record

GitHub stars

8,855

Detected license

MPL-2.0

Repository created

2023-11-09

Repository push

2026-11-03

III / Observations & evidence

GitHub stars

Unknown

i
Window mismatch; awaiting refresh

Cached history uses a different month window; chart withheld until aligned.

Latest attempt: ok · Checked 2026-10-15T19:40:39.600225+00:00 · Last successful fetch 2026-10-15T19:40:39.600225+00:00 · Provider source

Hacker News stories

Unknown

i
Not recorded

OpenSSF Scorecard

8.3/10

Scanned 2026-11-03 · 18 scored / 18 returned

i
Available
  • Dependency-Update-Tool · 10/10

    update tool detected

  • Code-Review · 8/10

    Found 18/22 approved changesets -- score normalized to 8

  • Maintained · 10/10

    30 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10

  • Dangerous-Workflow · 10/10

    no dangerous workflow patterns detected

  • Token-Permissions · 10/10

    GitHub workflow tokens follow principle of least privilege

  • License · 10/10

    license file detected

  • CII-Best-Practices · 2/10

    badge detected: InProgress

  • Binary-Artifacts · 10/10

    no binaries found in the repo

  • Pinned-Dependencies · 10/10

    all dependencies are pinned

  • SAST · 7/10

    SAST tool detected but not run on all commits

  • Vulnerabilities · 0/10

    128 existing vulnerabilities detected

  • Branch-Protection · 5/10

    branch protection is not maximal on development and all release branches

  • Signed-Releases · 8/10

    5 out of the last 5 releases have a total of 5 signed artifacts.

  • Fuzzing · 10/10

    project is fuzzed

  • Security-Policy · 10/10

    security policy file detected

  • Packaging · 10/10

    packaging workflow detected

  • CI-Tests · 10/10

    22 out of 22 merged PRs checked by a CI test -- score normalized to 10

  • Contributors · 10/10

    project has 22 contributing companies or organizations

Repository commit 4ef97069ea72 · Scorecard v5.6.0

Checked 2026-11-03T07:55:50Z · Last successful fetch 2026-11-03T07:55:50Z · Value fetched 2026-11-03T07:55:50Z · Provider source

IV / Release record

GitHub release

v2.7.2

Published 2026-10-26

i
Available

Checked 2026-11-04T04:04:05Z · Last successful fetch 2026-11-04T04:04:05Z · Value fetched 2026-11-04T04:04:05Z · Provider source

V / Where it runs

Unknown

i
Not reviewed
VI / Reviewed alternativesHashiCorp Vault Community Edition

Secrets, certificates, and key management; replacing a Vault CE server cluster with OpenBao. Guide tested against Vault CE 1.14.1 with Raft storage and Shamir unseal, using OpenBao 2.2.0. Does not establish Vault Enterprise replacement or universal newer-version compatibility. Checked 2026-10-05