Repository navigation
Releases: YagoLagrottiBracco/envrune
Release list
v1.3.0
EnvRune v1.3.0: encrypted environment variables from the command line.
Download
| Platform | Installer | Portable |
|---|---|---|
| Windows (x64 and ARM64) | Setup (.exe) | zip x64 · zip ARM64 |
| macOS (Apple Silicon and Intel) | Installer (.pkg) | tar.gz Apple Silicon · tar.gz Intel |
| Linux x64 | deb · rpm | tar.gz |
| Linux ARM64 | deb · rpm | tar.gz |
One-line install (macOS and Linux):
curl -fsSL https://raw.githubusercontent.com/YagoLagrottiBracco/envrune/main/install.sh | shAfter installing, open a new terminal and run envrune to create your vault.
Installer trust: the installers are not code-signed yet. Windows
SmartScreen may show "Windows protected your PC": choose More info →
Run anyway. On macOS, if the .pkg is blocked, open System Settings →
Privacy & Security and choose Open Anyway. Every file is listed in
checksums.txt so you can verify the download.
Changelog
- c2aa0d1 build(release): give GoReleaser the package token in the form it takes
- 0f266b8 docs(cloud): replacing an account key
- 276875e feat(cli): a recovery key is shown off the scrollback and confirmed
- c49c82b feat(cli): version, and a check for a newer release when asked
- 47d7c01 feat(cloud): a doctor, and a server that says when its database is behind
- 7c7d31c feat(cloud): replace an account key
- 04bc230 feat(run): tell a program where a service is, for sensitive secrets without a proxy
- 6b6fba3 fix(cloud): after the emailed link, come back to the server's own address
- 231a105 fix(run): sensitive secrets on a network that requires a proxy
- 15a6698 style: keep onboarding.go's line endings
- 6779fd6 test(cloud): envrune login in a real browser
v1.2.0
EnvRune v1.2.0: encrypted environment variables from the command line.
Download
| Platform | Installer | Portable |
|---|---|---|
| Windows (x64 and ARM64) | Setup (.exe) | zip x64 · zip ARM64 |
| macOS (Apple Silicon and Intel) | Installer (.pkg) | tar.gz Apple Silicon · tar.gz Intel |
| Linux x64 | deb · rpm | tar.gz |
| Linux ARM64 | deb · rpm | tar.gz |
One-line install (macOS and Linux):
curl -fsSL https://raw.githubusercontent.com/YagoLagrottiBracco/envrune/main/install.sh | shAfter installing, open a new terminal and run envrune to create your vault.
Installer trust: the installers are not code-signed yet. Windows
SmartScreen may show "Windows protected your PC": choose More info →
Run anyway. On macOS, if the .pkg is blocked, open System Settings →
Privacy & Security and choose Open Anyway. Every file is listed in
checksums.txt so you can verify the download.
Changelog
v1.1.0
EnvRune v1.1.0: encrypted environment variables from the command line.
Download
| Platform | Installer | Portable |
|---|---|---|
| Windows (x64 and ARM64) | Setup (.exe) | zip x64 · zip ARM64 |
| macOS (Apple Silicon and Intel) | Installer (.pkg) | tar.gz Apple Silicon · tar.gz Intel |
| Linux x64 | deb · rpm | tar.gz |
| Linux ARM64 | deb · rpm | tar.gz |
One-line install (macOS and Linux):
curl -fsSL https://raw.githubusercontent.com/YagoLagrottiBracco/envrune/main/install.sh | shAfter installing, open a new terminal and run envrune to create your vault.
Installer trust: the installers are not code-signed yet. Windows
SmartScreen may show "Windows protected your PC": choose More info →
Run anyway. On macOS, if the .pkg is blocked, open System Settings →
Privacy & Security and choose Open Anyway. Every file is listed in
checksums.txt so you can verify the download.
Changelog
v1.0.1
EnvRune v1.0.1: encrypted environment variables from the command line.
Download
| Platform | Installer | Portable |
|---|---|---|
| Windows (x64 and ARM64) | Setup (.exe) | zip x64 · zip ARM64 |
| macOS (Apple Silicon and Intel) | Installer (.pkg) | tar.gz Apple Silicon · tar.gz Intel |
| Linux x64 | deb · rpm | tar.gz |
| Linux ARM64 | deb · rpm | tar.gz |
One-line install (macOS and Linux):
curl -fsSL https://raw.githubusercontent.com/YagoLagrottiBracco/envrune/main/install.sh | shAfter installing, open a new terminal and run envrune to create your vault.
Installer trust: the installers are not code-signed yet. Windows
SmartScreen may show "Windows protected your PC": choose More info →
Run anyway. On macOS, if the .pkg is blocked, open System Settings →
Privacy & Security and choose Open Anyway. Every file is listed in
checksums.txt so you can verify the download.
Changelog
- 1cf0b41 fix(cloud): the sign-in page sends the session to the CLI
v1.0.0
EnvRune v1.0.0: encrypted environment variables from the command line.
Download
| Platform | Installer | Portable |
|---|---|---|
| Windows (x64 and ARM64) | Setup (.exe) | zip x64 · zip ARM64 |
| macOS (Apple Silicon and Intel) | Installer (.pkg) | tar.gz Apple Silicon · tar.gz Intel |
| Linux x64 | deb · rpm | tar.gz |
| Linux ARM64 | deb · rpm | tar.gz |
One-line install (macOS and Linux):
curl -fsSL https://raw.githubusercontent.com/YagoLagrottiBracco/envrune/main/install.sh | shAfter installing, open a new terminal and run envrune to create your vault.
Installer trust: the installers are not code-signed yet. Windows
SmartScreen may show "Windows protected your PC": choose More info →
Run anyway. On macOS, if the .pkg is blocked, open System Settings →
Privacy & Security and choose Open Anyway. Every file is listed in
checksums.txt so you can verify the download.
Changelog
v0.2.0
EnvRune v0.2.0: encrypted environment variables from the command line.
Download
| Platform | Installer | Portable |
|---|---|---|
| Windows (x64 and ARM64) | Setup (.exe) | zip x64 · zip ARM64 |
| macOS (Apple Silicon and Intel) | Installer (.pkg) | tar.gz Apple Silicon · tar.gz Intel |
| Linux x64 | deb · rpm | tar.gz |
| Linux ARM64 | deb · rpm | tar.gz |
One-line install (macOS and Linux):
curl -fsSL https://raw.githubusercontent.com/YagoLagrottiBracco/envrune/main/install.sh | shAfter installing, open a new terminal and run envrune to create your vault.
Installer trust: the installers are not code-signed yet. Windows
SmartScreen may show "Windows protected your PC": choose More info →
Run anyway. On macOS, if the .pkg is blocked, open System Settings →
Privacy & Security and choose Open Anyway. Every file is listed in
checksums.txt so you can verify the download.
Changelog
- 1a883e2 build: rename the Go module to match the repository
- 1090e50 ci: test on Linux, macOS, and Windows for every push
- 807a8e3 feat(agent): serve the agent on a user-only named pipe on Windows
- 06b4150 feat(cli): machine-readable status and inspect for editors and prompts
- 8980454 feat(cloud): a client certificate as a sensitive secret
- 4e9e120 feat(cloud): a lost device is cut off, re-keyed, and accounted for
- 150627a feat(cloud): a server that says what it is missing before it is configured
- 06ac81f feat(cloud): access for a limited time
- c3cecf1 feat(cloud): an emergency takes a compromised project's keys from everyone
- 1692f10 feat(cloud): an optional limit on offline use, per organization
- 00bdec9 feat(cloud): cloud references in envrune.yml, CI tokens, consumer limits
- 9558da1 feat(cloud): commands pick up a replaced value by themselves
- eec98e4 feat(cloud): database schema and access rules on Supabase
- 40600d4 feat(cloud): export and verify the audit log
- 8bb0f87 feat(cloud): forward a member's request with a sensitive secret put in
- 640349e feat(cloud): guided rotation in the CLI and the panel
- 7605703 feat(cloud): hand approved devices the account key; let CI verify alone
- 4bcc2ba feat(cloud): mark a secret sensitive and seal it to the server
- 29b49e8 feat(cloud): more root holders, and an invitation that carries the roots
- a1666fe feat(cloud): move a team file to the cloud with import-team
- 0a7fe80 feat(cloud): record the use of values a member may not see
- 176e9c8 feat(cloud): rules about which roles may fetch which environments
- a104b3e feat(cloud): see who already has a replaced value
- aea1430 feat(cloud): self-hosting with Docker
- 203f2fd feat(cloud): sensitive secrets in up and for agents
- 77929b5 feat(cloud): tell an address what happens in an organization
- 72e91d8 feat(cloud): the CLI client: login, devices, organizations, secrets
- 5434e94 feat(cloud): the EnvRune Cloud API in Next.js
- 194fda1 feat(cloud): the panel: sign-in, CLI authorization, organizations
- ad56166 feat(cloudcrypto): client-side cryptography for EnvRune Cloud
- 043b714 feat(diff): compare the variables of two environments
- f62fa8d feat(doctor): point at secrets nobody uses
- 822ddfe feat(guard): block commits that stage vault values
- bb9ec6a feat(mcp): let AI agents run commands without reading secrets
- 19791f9 feat(mcp): refuse any-command for a consumer's cloud values
- f1f3dac feat(migrate): move .env files into the vault and envrune.yml
- e7d62a0 feat(packages): replace dotenv in Node and Python
- 0c50587 feat(project): environments that extend each other, a personal override, workspaces
- a48c949 feat(prompt): show the vault state in Starship, Oh My Posh, or any prompt
- 03529f5 feat(providers): pull from Vercel and 1Password, push to Vercel and GitHub
- 10ddb62 feat(redact): find and mask vault values in streamed output
- f6752fc feat(run): mask vault values in the output of run and up
- 94bead9 feat(run): notice replaced values while a command runs
- 2c73e06 feat(run): secrets as files, templates, and checks
- c51ad9d feat(run): use a sensitive secret without it reaching the machine
- 400489b feat(scan): find vault values in files, logs, and Git history
- 4351221 feat(types): generate typed settings from variables:
- 9ddb9e5 feat(up): let services keep their own envrune.yml
- e85dc01 feat(variables): document variables, validate values, and add setup
- 657698f feat(vscode): an EnvRune extension for VS Code
- 5a840ee feat: unlock once, run whole stacks, and share secrets with a team
- 21d0779 fix(cloud): hand over what a member signed when they leave or are demoted
- a3f2848 fix(cloud): let members share keys with their own new devices
- 03bae23 fix(cloudcrypto): sign times in microseconds and share test vectors
- dbaf31a fix(install): create a writable install dir without sudo
- ddc1593 fix(release): the Windows installer's binary knows its version
- bf9b172 fix(up): stop what a service leaves behind on Windows
- e7b9ce7 fix: dispatch helper processes from package init
- baef36e fix: make run, locking, and errors usable day to day
- 89fbae8 test(cloud): end to end against the real API and database
v0.1.0
EnvRune v0.1.0: encrypted environment variables from the command line.
Download
| Platform | Installer | Portable |
|---|---|---|
| Windows (x64 and ARM64) | Setup (.exe) | zip x64 · zip ARM64 |
| macOS (Apple Silicon and Intel) | Installer (.pkg) | tar.gz Apple Silicon · tar.gz Intel |
| Linux x64 | deb · rpm | tar.gz |
| Linux ARM64 | deb · rpm | tar.gz |
One-line install (macOS and Linux):
curl -fsSL https://raw.githubusercontent.com/YagoLagrottiBracco/envrune/main/install.sh | shAfter installing, open a new terminal and run envrune to create your vault.
Installer trust: the installers are not code-signed yet. Windows
SmartScreen may show "Windows protected your PC": choose More info →
Run anyway. On macOS, if the .pkg is blocked, open System Settings →
Privacy & Security and choose Open Anyway. Every file is listed in
checksums.txt so you can verify the download.
Changelog
- 6d65b0c build: point release config to renamed repo
- 9c4003b build: point release config to renamed repo
- f285a2a build: publish release binaries with GoReleaser
- 2b8ed0f build: ship installers for Windows, macOS, and Linux
- 507038f feat: add clear terminal feedback
- 35c14ec feat: add encrypted vault format and storage
- 248b4c0 feat: add in-memory vault sessions
- 99a452e feat: add init set and list commands
- 928fe79 feat: add one-password interactive shell
- f42b6e9 feat: add project links and usage
- 75a3f09 feat: add reference validation and vault crypto
- 585dd3a feat: add runtime application services
- ee01039 feat: add secure generator and dotenv parser
- 370d333 feat: add secure loopback management ui
- 690aaaa feat: add secure runtime commands and export
- e6ab8c6 feat: add vault application service
- 0a62b09 feat: guide first vault setup
- e55b44f feat: reuse shell session for local UI
- 426702b fix: bound vault resource use and durability
- abbbfd7 fix: harden linux child execution
- 849a6fe fix: harden runtime persistence and child io
- 17a85a2 fix: make project linking durable and serialized
- e8b1e87 fix: preserve command output and lock on interrupt
- 351863b fix: require deliberate export confirmation
- 8933a85 fix: support standard help flags
- a41fd7a merge: add interactive Envrune workflow
- 8c7b7e3 merge: complete envrune phase one core
- 70435e8 merge: complete envrune phase two projects
- 91c9597 merge: complete envrune phases three and four