v0.2.0 - Initial Release

EnvSafe v0.2.0

Your secrets, encrypted, everywhere. Universal .env and secrets manager.

Highlights

• Encrypted Vault -- AES-256-GCM encrypted storage with per-project keys
• Environment Profiles -- Manage dev, staging, prod configurations side by side
• Process Injection -- envsafe run -- npm start injects secrets without touching the shell
• Git-Safe Sharing -- Lock/unlock encrypted vault files safe for version control
• Secret Scanning -- 14 regex patterns detect AWS keys, GitHub tokens, passwords, and more
• Cloud Sync -- Pull/push from AWS SSM, HashiCorp Vault, 1Password, GCP Secret Manager
• Schema Validation -- Define required variables with pattern and type checking
• Interactive TUI -- Full terminal UI for managing secrets visually
• Shell Integration -- Auto-inject on cd with bash/zsh/fish hooks
• Key Rotation -- Rotate encryption keys with automatic backups
• Audit Logging -- Encrypted append-only log of all operations
• OS Keychain -- Integrates with Windows Credential Manager, macOS Keychain, Linux Secret Service
• Plugin System -- Extend with custom envsafe-plugin-* executables
• Export Formats -- shell, dotenv, json, docker, kubernetes

30 CLI Commands

init set get rm ls run export import envs diff lock unlock key validate template hook scan completions hook-shell man-page pull push ui rotate-key audit telemetry plugin plugins

Install

cargo install envsafe

Or download binaries from this release page (coming with CI).

Quick Start

envsafe init
envsafe set DATABASE_URL "postgres://localhost/mydb"
envsafe set API_KEY "sk-secret" --secret
envsafe run -- npm start