Alternatives
Products that do what EnvCloak: lightweight, env file encryption – ready for CICD pipelines does
When someone here told me to focus on something more useful than reinventing the wheel. So. EnvCloak, a lightweight and simple tool for securely managing sensitive environment files. The design focuses on simplicity - just a few intuitive commands using the Click Python library. I assume seamless integration with CI/CD workflows. The aim is to provide a streamlined solution without the need for clunky tools. If you're tired of complex configurations or bloated alternatives, this might be worth a look! I would appreciate any feedback, feature ideas or input on how to improve this…
- 1CT
2024 · github.com
- 2IJ
.env files have always felt archaic, insecure, clunky and honestly just not fun to work with. I see my friends (and myself) accidentally committing them all the time. Managing secrets across projects becomes a mess of copy-pasting keys into scattered env files with no real way to sync anything. So I built better-env: a secure, developer-friendly alternative to .env. Store your secrets once in a global encrypted store, and load them per-project at runtime. I’d love feedback on whether this feels useful beyond solo devs, and what you’d want for teams or CI setups. Fully open source:…
Nov 2025 · better-env.dev
- 3
- 4B2
This is a long-running project that started as the proverbial need to scratch my own itch and then somehow evolved into a full-time job of the past 6 years. Link: https://bvckup2.com I thought I'd do a Show HN for two reasons. 1. I obviously want to show my baby to those who haven't seen it. Its primary purpose is to do very fast file replication. If you are familiar with "robocopy /mir" - same idea, but on steroids. Lots of them. It can be used for both mirroring and archiving backups, among other things. It is light, very small and it is really quite fast. Half of the…
2019 · bvckup2.com
- 5IB
Hi HN, I built Envs.AI, a free tool to solve the headache of managing environment variables across different environments and platforms. Envs.AI lets you store all your environment variables in one secure place and easily integrate them with Jenkins, Python, and other platforms in your tech stack. No more scattered .env files or sharing secrets through Slack messages. Some features: - Central repository for all env variables - Secure storage with proper access controls - Simple integration with CI/CD pipelines - Easy access via API for different languages and frameworks - Team…
2025 · envs.ai
- 6CN
2020 · conducto.com
- 7PE
Now that I have your attention (“Don’t you dare version control environment files!!”, “This can’t be safe.”) and before you tear me and my project to shreds, please allow me to take a moment to celebrate something small but meaningful: I’ve finally released a thing. Thank you. Motivation tl;dr: The existing tools and libraries for versioning and syncing environment files / secrets across team members and CI machines just didn’t cut it for me. So, I set out to create my own solution — one finally checks all my boxes. So what is places-env? (I encourage you to check the readme…
2024 · github.com
- 8LH
I got tired of: - .env files committed to Git (seen it happen 100+ times) - API keys shared in Slack - Wondering who has access to what secrets So I built Liberty - a CLI tool that replaces .env files with hardware-bound encryption. How it works: $ pip install liberty-secrets $ liberty add DATABASE_URL postgresql://... $ liberty add STRIPE_KEY sk-... $ liberty exec npm start Secrets are encrypted with a key derived from your machine's hardware (CPU ID + machine ID + disk serial). If someone steals your .liberty vault file, it's useless on their machine. Features: - Hardware-bound…
Jan 2026
- 9KC
Hi HN, I built KeyEnv because I was tired of the "can you Slack me the Stripe key?" workflow. The problem: My team's secrets lived in a mix of Slack DMs, shared Google Docs, and .env files that definitely weren't in .gitignore at some point. Enterprise tools like Vault required more DevOps time than we had. Doppler was close but felt heavier than we needed. What KeyEnv does: keyenv init # link project keyenv pull # sync secrets to local .env keyenv run -- npm start # inject secrets, run command That's basically it. Secrets are encrypted client-side (AES-256-GCM) before leaving your machine.…
Jan 2026 · keyenv.dev
- 10AC
I built this toolkit with my colleague to dive deep into OS internals and automate the identification of privilege escalation vectors. Written in pure C without external dependencies, it explores everything from Linux capabilities and Docker escapes to Windows token manipulation and service permissions. We believe that the constant struggle between breaking and securing systems is the ultimate driver of software evolution. This tool is our contribution to that cycle, designed for researchers who want to understand how low-level misconfigurations can be discovered and audited across different…
Jan 2026
- 11IA
ibex is a cross-platform tool designed for decrypting and extracting iOS backups. It provides forensic investigators, security researchers, and power users with the ability to access and analyze encrypted iOS backup data. It can be built and used on macOS, Linux, and Windows and is permitted to be used only with the explicit and informed consent of the backup data owner. Ibex was written in Go for straightforward compilation and to circumvent dependency issues and with the goal of enabling researchers and defenders assisting civil society victims of spyware and stalkerware Key Features -…
2025 · github.com
- 12ZS
Put this together because I was tired of setting up anything when testing / prototyping projects that need a simple queue. Feedback / PRs / issues welcome. Feel free to use in production if you dare (or run your own server).
2023 · github.com
- 13SA
2020 · shuttleops.io
- 14GE
Hi! I've been frustrated with the secret sharing situation in serverside javascript land for a while; the common thing is to just toss .env files around on Slack to get someone's app working, or involves some kind of convoluted setup to get a blob from a storage and turn it into environment variables via commands I have to copy paste every time. But everyone uses secret storage providers, e.g. shared password vaults, cloud secrets, etc., so why not leverage those as URIs in a JSON file that can be checked in to source control? I want something simple that would just generate the darn .env…
2025 · github.com
- 15VI
This was submitted before but it didn't seem to get much attention because I don't think the title was very descriptive and the submitter was brand new. I almost didn't click it but once I did I thought the project was pretty awesome and had a lot of promise. Hope this doesn't violate the rules, I have no horse in the game, but the creator is here on the site so hopefully he'll be able to answer your questions.
2022 · docs.vaxiin.io
- 16C1
2015 · github.com
- 17
- 18RT
rx is a lightweight CLI and runtime that lets you deploy any function instantly as you save it in your editor. It’s fast, simple, and takes care of setting up all your cloud infrastructure. The best dev experience with everything you need built-in: - auth - permissions - payments - secrets - storage - logs - email & SMS - and way more Related beta launch tweet: https://x.com/KhalidZoabi/status/1777673531972608249 Wanted to show it to you guys, gauge interest, and get some feedback. There's a large roadmap of upcoming stuff. Feel free to DM me on X for more information!
2024 · rx.run
- 19CC
We're two engineers that got fed up with context switching. Why do we need to do a git push, open a browser tab, wait for some task to actually start, bite nails (or read HackerNews) for 10 minutes or more while dependencies are being installed for the 100th time and finally end up with an invalid YAML error. And for some reason this usually happens in the final stage of the pipeline leading up to the inevitable git commits "Fixed", "Fixed again", "Test", "Really fixed this time". We can do better. We set out to build Zippy. A CI/CD system that works from your terminal. No context…
Mar 2026 · zippy.sh
- 20NQ
Hey HN, We're building ncrypt, an open-source encrypted file manager that allows you to store, manage, and privately query your files using fully homomorphic encryption (FHE). This project originally started as a simple SFTP-like CLI for my personal S3 buckets which I used to send and retrieve encrypted files and have more granular control over key rotation. As the number of files that I was storing grew, file discovery started to become a problem, and I found myself frequently having to download and decrypt files to inspect their contents. Rather than leaving them unencrypted in S3 and…
2025 · github.com
- 21CO
Hi HN, I built Cloudstic (https://github.com/Cloudstic/cli), an open-source Go CLI that creates encrypted, deduplicated, point-in-time backups of your Google Drive, OneDrive, and local files. The Problem Google Drive and OneDrive are sync tools, not backup tools. If you accidentally delete a folder, it’s gone everywhere. If ransomware encrypts your local files, the "mistake" propagates to the cloud immediately. There is no easy way to say: "Restore my entire Drive exactly as it looked on January 15th." Why not just use Restic or Borg? I’m a huge fan of Restic, and…
Mar 2026 · github.com
- 22CA
2017 · github.com
- 23SA
built snub, a fast and lightweight recursive file search tool for Windows, written in modern C (C17). File Explorer and PowerShell often crawl on large codebases — so I wrote something that doesn’t. snub is: - Fully multithreaded - Avoids indexing entirely - Supports globbing, size/date filters, result limiting, and JSON output - Packaged as a single small executable No dependencies. Just raw C and the WinAPI. GitHub: https://github.com/seeyebe/snub Would love feedback on C idioms, WinAPI practices, or ideas for portability and better build flow.
2025 · github.com
- 24CD
2014 · code.ivysaur.me
Ranked by how close each launch is in meaning, then by votes. Refine with a description →