Fujin Secrets - Bitwarden
Bitwarden secret adapter for Fujin deployment tool.
Installation
pip install fujin-secrets-bitwarden
Or with uv:
uv pip install fujin-secrets-bitwarden
Prerequisites
Download and install the Bitwarden CLI and log in to your account.
You should be able to run bw get password <name_of_secret> and get the value for the secret. This is the command that will be executed when pulling your secrets.
Configuration
Add the following to your fujin.toml file:
[secrets]
adapter = "bitwarden"
[secrets.options]
password_env = "BW_PASSWORD"
To unlock the Bitwarden vault, the password is required. Set the BW_PASSWORD environment variable in your shell. When Fujin signs in, it will always sync the vault first.
Alternatively, you can set the BW_SESSION environment variable. If BW_SESSION is present, Fujin will use it directly without signing in or syncing the vault. In this case, the options.password_env configuration is not required.
Usage
In your environment file (.env or configured via envfile in fujin.toml), prefix secret values with $:
DEBUG=False
AWS_ACCESS_KEY_ID=$AWS_ACCESS_KEY_ID
AWS_SECRET_ACCESS_KEY=$AWS_SECRET_ACCESS_KEY
The $ sign indicates to Fujin that it is a secret that should be resolved using the configured adapter.
How it Works
The adapter:
- Authenticates with Bitwarden using
BW_SESSIONor unlocks the vault with the configured password - Syncs the vault (when unlocking)
- Resolves all secrets concurrently using
bw get password <name> --raw - Returns the resolved environment variables
Related
1 maintainer
Metadata
1 maintainer
Release files for fujin-secrets-bitwarden 0.27.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| fujin_secrets_bitwarden-0.27.1.tar.gz | 2.9 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| fujin_secrets_bitwarden-0.27.1-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 7.1 kB
Release files / fujin_secrets_bitwarden-0.27.1.tar.gz
| Download URL | fujin_secrets_bitwarden-0.27.1.tar.gz |
|---|---|
| Size | 2.9 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
140fe531e131d2696c20fb30d3d19f4398b2f0c3ddcd7f28f7c6c0e71988a5e1
|
|
BLAKE2b-256 checksum How to use checksums |
b18ceafb96002b5b31ae0fd1e30f198bc247cfd2f49d91beef1243b5063b33f4
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.12
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Jun 25, 2026.
Transparency logRelease files / fujin_secrets_bitwarden-0.27.1-py3-none-any.whl
| Download URL | fujin_secrets_bitwarden-0.27.1-py3-none-any.whl |
|---|---|
| Size | 4.2 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
c40800c2bc099244cd21a6e3edfe4d5af7016c82a5f8e40d4928ecec8e84d7ae
|
|
BLAKE2b-256 checksum How to use checksums |
661a5ecc4ada32e4f16a662bfccce606d8c58c3157bf9767f8bf12dfead3b0b5
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.12
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Jun 25, 2026.
Transparency log
