You can use Infisical for both secrets, certs, and PAM: https://infisical.com

No. Infisical is headed the same direction. Most of the secrets management and PAM bits that matter are not even in the open source repo, you need a paid license to get access.

Infisical was really amazing. It did precisely what I needed and any missing pieces would go in as a PR that would be quickly reviewed and merged. Then came talk about raising more funds, signing up more enterprise customers. Then came refactors to "improve the architecture" and "increase security". All the core pieces I depended on were moved behind an enterprise license.

Want Infisical to support Forgejo logins or runners via keys minted by step-ca? Enterprise license. Special secret cubbys or enclaves? Enterprise license.

Anything outside a toy usecase for a home user - Enterprise license.

A year ago I spent ~3 focused weeks ripping out every piece of Infisical in my infra and replacing it with a mix of Keycloak, Conjur and Age/SOPS. They are ugly, hard to work with, setup and debug - I'm not proud of this monster but I won't have to deal with what's going to happen to Infisical.

Infisical has every right to do this, I'm not complaining about that. I'm simply mentioning that we have seen this movie before, including the company in the title, so at this point, the tells are clear.