eblume/blumeops
1
1
Fork 0
Code Issues Pull requests Projects Releases 83 Packages Wiki Activity Actions

Document op read vs op item get convention (#143)

Browse source 
## Summary
- Adds guidance to CLAUDE.md: use `op read` for secret values, `op item get` only for metadata
- Fixes the argocd login example which used `op item get --fields`
- `op item get --fields` wraps multi-line values in quotes, which corrupts keys and other secrets

Discovered while verifying the sifaka borg repokey in 1Password — hashes didn't match until we switched to `op read`.

Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/143
This commit is contained in:
Erich Blume 2026-02-10 13:09:55 -08:00
commit 0d5f48e2c2
2 changed files with 4 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

1
docs/changelog.d/docs-op-read-convention.doc.md Normal file
View file

@ -0,0 +1 @@
Document `op read` vs `op item get` convention for 1Password secret retrieval