Shell-secrets – GPG-encrypted environment variables

This page summarizes the projects mentioned and recommended in the original post on news.ycombinator.com

InfluxDB – Built for High-Performance Time Series Workloads
InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.
www.influxdata.com
featured
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com
featured
  1. age

    A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.

    The easier and more productive thing is to make an easy-to-use tool that does a specific workflow vs trying to be a swiss army knife.

    https://github.com/FiloSottile/age is this for encrypting files.

    https://en.wikipedia.org/wiki/Signify_(OpenBSD) and https://jedisct1.github.io/minisign/ are this for signing files.

    Signal/Whatsapp/etc that use the Signal Protocal are this for messaging.

    It turns out solving one problem at a time and ending up with a bunch of purpose-built tools is way easier to get right than trying to jam an entire toolbox into one thing.

  2. InfluxDB

    InfluxDB – Built for High-Performance Time Series Workloads. InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.

    InfluxDB logo
  3. shell-secrets

    Encrypted environment variables

  4. direnv

    unclutter your .profile

    Unless you're good at actually maintaining your gpg keychain and need other people to access this, I really wouldn't bother with gpg. There are way better and simpler options.

    Age has a simpler interface and SSH key support https://github.com/FiloSottile/age

    ejson2env has the environment variable integration and ejson has multiple backends https://github.com/Shopify/ejson2env

    direnv can support any cli secrets manager per project directory https://direnv.net/

    I've dealt with enough "why did this break" situations with gpg secrets files used by capable teams that I'd never recommend that to anyone.

  5. ejson2env

    Decrypt EJSON secrets and export them as environment variables.

    Unless you're good at actually maintaining your gpg keychain and need other people to access this, I really wouldn't bother with gpg. There are way better and simpler options.

    Age has a simpler interface and SSH key support https://github.com/FiloSottile/age

    ejson2env has the environment variable integration and ejson has multiple backends https://github.com/Shopify/ejson2env

    direnv can support any cli secrets manager per project directory https://direnv.net/

    I've dealt with enough "why did this break" situations with gpg secrets files used by capable teams that I'd never recommend that to anyone.

  6. minisign

    A dead simple tool to sign files and verify digital signatures.

    The easier and more productive thing is to make an easy-to-use tool that does a specific workflow vs trying to be a swiss army knife.

    https://github.com/FiloSottile/age is this for encrypting files.

    https://en.wikipedia.org/wiki/Signify_(OpenBSD) and https://jedisct1.github.io/minisign/ are this for signing files.

    Signal/Whatsapp/etc that use the Signal Protocal are this for messaging.

    It turns out solving one problem at a time and ending up with a bunch of purpose-built tools is way easier to get right than trying to jam an entire toolbox into one thing.

  7. rust

    Empowering everyone to build reliable and efficient software.

    Another trick with github urls: you can append .patch or .diff to any PR or commit URL, and you'll get back a git-formatted patch or diff.

    https://github.com/rust-lang/rust/pull/139966

    https://github.com/rust-lang/rust/pull/139966.patch

    https://github.com/rust-lang/rust/pull/139966.diff

  8. aws-vault

    A vault for securely storing and accessing AWS credentials in development environments

    If you're using more complicated systems than just a single root account, have a look at https://github.com/99designs/aws-vault too.

  9. SaaSHub

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    SaaSHub logo
  10. shell-secrets

    Encrypted environment variables (by vapniks)

    I've forked the repo and created a zsh version: https://github.com/vapniks/shell-secrets

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts

  • OpenMLS – An open-source implementation of Messaging Layer Security protocol

    1 project | news.ycombinator.com | 6 Mar 2025
  • AWS Libcrypto for Rust

    3 projects | news.ycombinator.com | 12 Jan 2024
  • Boletín AWS Open Source, Christmas Edition

    9 projects | dev.to | 24 Dec 2023
  • A brief guide to choosing TLS crates

    5 projects | /r/rust | 9 Jun 2023
  • Releasing Rust Binaries with GitHub Actions - Part 2

    2 projects | dev.to | 21 Nov 2022

Did you know that Go is
the 4th most popular programming language
based on number of references?