envchain vs dotfiles

Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

www.influxdata.com

featured

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com

featured

envchain		dotfiles
	Project
3	Mentions	3
1,139	Stars	153
-	Growth	-
0.0	Activity	5.6
almost 2 years ago	Latest Commit	about 2 months ago
C	Language	Shell
MIT License	License	-

The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

envchain

Posts with mentions or reviews of envchain. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2023-03-14.

How do you protect your secret keys in your local computer?
6 projects | /r/devops | 14 Mar 2023

I use https://github.com/sorah/envchain. It stores your secrets in Keychain (macOS) or gnome-keyring.
Secretlint 6: masking API tokens in .bash_history and .zsh_history
4 projects | dev.to | 3 Jan 2023

Credentials are often stored as raw text in .config/ or ~/.aws. These can be found in 1Password Shell Plugins, op run, zenv, envchain, etc. to avoid storing raw tokens in files.
How to Handle Secrets on the Command Line
10 projects | news.ycombinator.com | 13 Jun 2021

You have envchain to store secrets as ENV variables in your keyring and execute commands:
https://github.com/sorah/envchain
Not really something you would use for production web apps, I think envconsul covers that usecase:
https://github.com/hashicorp/envconsul

dotfiles

Posts with mentions or reviews of dotfiles. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-03-25.

kaihendry/dotfiles: Home directory with an absurd amount of tweaks
1 project | /r/dotfiles | 25 Aug 2022
Use Multiple WM without DM
2 projects | /r/archlinux | 25 Mar 2022

Kai Hendry has a prompt that asks him on login to start Xorg/DWM or not, in case he wants to run Sway, it's clever. dotfiles.
How to Handle Secrets on the Command Line
10 projects | news.ycombinator.com | 13 Jun 2021

I defer to using AWS SSM to retrieve secrets https://github.com/kaihendry/dotfiles/blob/master/bin/ssm
But yeah, reading secrets of env or ps or the clipboard is a real issue, so I focus on making sure that doesn't leak.
I've made terrible mistakes leading /proc accidentally in my Web app https://github.com/securego/gosec/issues/569

What are some alternatives?

When comparing envchain and dotfiles you can also consider the following projects:

Mosh - Mobile Shell

zsh-secrets - Storing GPG encrypted environment variables

gosec - Go security checker

platform-compat - Roslyn analyzer that finds usages of APIs that will throw PlatformNotSupportedException on certain platforms.

envconsul - Launch a subprocess with environment variables using data from @HashiCorp Consul and Vault.

encpass.sh - Lightweight solution for using encrypted passwords in shell scripts

secretlint - Pluggable linting tool to prevent committing credential.

dotfiles - Dotfiles are the customization files in GNU/Linux. This repository assembly together all my others github config repos to one union. You can choose this global conf for your system or check other repos.

ShellCheck - ShellCheck, a static analysis tool for shell scripts