LoginSign Up
← Back to all sparks
D

Doppler

INFRA · APIS
Velocity0.0

Secrets management platform for syncing environment variables across environments

www.doppler.com ↗

Doppler adds keyless syncs and agent-facing secrets as on-prem settles in

secrets-managementoidcsecret-rotationai-agentsterraformon-prem
◆Current state
Three monthly digests follow the June on-prem release. September made Permissive secret naming available to all workplaces, let users with Manage Settings permission revoke every personal and CLI token across a workplace, and added a Dynamic variable type for Vercel syncs. August added syncs to GitHub Copilot Agents, OpenAI service accounts as a rotated secret type, and OIDC for GCP and Azure syncs so no credential has to be stored in Doppler. July brought a workplace-level Compare page across configs and projects.
◆Where it's heading
The June-era commitments are holding: everything reachable programmatically, with Terraform resources following each new feature, and control over a secret's whole lifecycle. A newer line is visible too. AI agents are becoming a place secrets are delivered to, and OIDC is removing the stored credential from Doppler's own syncs. September's fix to instance-admin promotion shows the On-prem build getting ordinary maintenance.
◆Prediction
Expect more AI-platform sync and rotation targets after GitHub Copilot Agents and OpenAI service accounts, each followed by a Terraform resource. Whether OIDC extends beyond GCP and Azure is not stated.

◆Recent moves

  1. 13d ago

    Doppler opens project tags and environment-scoped roles to more plans

    Project tags reach all workplaces and environment-scoped roles reach every paid plan, so teams can give one member different access per environment. Qovery syncs now cover Helm and Terraform services, and the classic Deno Deploy integration is retired with that platform.

    View source ↗
  2. 1mo ago

    Permissive secret naming and workplace-wide token revocation

    Permissive secret naming opens to all workplaces and admins can revoke all personal and CLI tokens at once, with project-list actions and quoted secret references alongside. The token revocation is the lifecycle-control item, and the month also has a Doppler On-prem fix.

    View source ↗
  3. 2mo ago

    GitHub Copilot Agents sync and OIDC for GCP and Azure syncs

    Doppler can now sync secrets to GitHub Copilot Agents, rotate OpenAI service accounts, and reach GCP and Azure through OIDC without a stored credential. Terraform resources for the new sync, rotation type and OIDC shipped in the same month, in line with the product's programmatic rule.

    View source ↗
  4. 3mo ago

    Compare page for secrets across configs and projects

    A workplace-level Compare page shows a secret's values across configs and projects and can start a Change Request from the selection. It turns a one-config view into an audit tool, in the same month as a Laravel Forge v2 API migration.

    View source ↗
  5. 4mo ago

    Doppler On-prem released

    ⚡ SPARK

    Doppler On-prem is released, with the rest of the month going to dashboard role filters, downstream-impact warnings before deleting inherited or referenced data, and fuzzy secret search. The self-hosted build is the item that changes who can buy the product at all.

    View source ↗
  6. 5mo ago

    Terraform support for access scoping and full secret-history redaction

    Integration Access Scoping becomes reachable through the API and Terraform, and every historical version of a secret can be redacted by name or ID so deleted history is fully scrubbed. History redaction is the substantive one — it answers the question an auditor asks after a leak.

    View source ↗