EXTENSIONS
User-built models, drivers, vaults, and reports — the parts that plug into swamp.
Filter by what you need and pull what fits.
Hashicorp Vault
HashiCorp Vault secrets management via REST API (KV v1 and v2)
Snowflake
Snowflake warehouses, databases, schemas, stages, tasks, pipes, secrets, and grants as Swamp models. Compose Snowflake pipelines with non-Snowflake resources in Swamp workflows. Backed by the Snowflake SQL Statement Execution API (v2).
Github/secrets
GitHub Actions secret management via the local gh CLI. Supports repo-level, environment-scoped, and organization-scoped secrets with fan-out, code-search discovery, and a dry-run mode on the org-level setter. No PAT, GitHub App, or vault-held token required — auth comes from the operator's existing gh session.
Aws Sm
Read and write secrets stored in AWS Secrets Manager, with support for
Databricks
Databricks Jobs, DLT pipelines, SQL warehouses, workspace notebooks/files, secrets, Unity Catalog, permissions, DBSQL queries, and Git Repos as Swamp models. Compose Databricks pipelines with non-Databricks resources in Swamp workflows.
Passbolt
Passbolt CLI vault provider for swamp secrets
1password
Read, write, and annotate secrets stored in 1Password using the `op` CLI.
Azure Kv
Read and write secrets stored in Azure Key Vault. Supports secret annotations
Sops Age
SOPS + age vault for swamp: encrypt secrets at rest with AES-256-GCM via Mozilla SOPS and age. Zero network dependency — fully local, file-based. Works with existing SOPS workflows and zo.space secrets dashboards.