nowfound

Life & fun · December 10, 2023

RO

Rot - Offline secrets management

Finally open sourced an internal tool we've been using for managing secrets. It's similar to SOPS, but more opinionated, easier to configure/use correctly, and produces nicer git diffs. It also supports one-way encryption, so you don't have to know the private key to add secrets.

In plain words

Rot is an open-source tool for managing secrets offline, designed for teams that need to store encrypted sensitive data in version control. It works similarly to SOPS but with a more opinionated approach that simplifies configuration and generates cleaner git diffs. A distinguishing feature is one-way encryption support, allowing users to add secrets without access to private keys. The tool is intended for developers and DevOps teams seeking straightforward secret management.

written from the facts on this page · September 2026

Does the same job

all alternatives →
  • IB
  • Phase2024 · ▲384

    Open source application secrets manager

  • Opengrep2025 · ▲340

    The open source code security engine

  • GT
    GitHub-to-sops: Easy way to manage passwords/keys with GitHub and SOPS2024 · taras.glek.net · ▲10

    I think I found the most minimalist way to share secrets between devs and infra. What do you think? https://github.com/tarasglek/github-to-sops PS. I'm not a security guy, go easy on me.

  • Phase2023 · ▲159

    Open-source secrets management for developers

  • LS
    Lockenv – Simple encrypted secrets storage for GitDec 2025 · github.com · ▲105

    Hi! I got tired of setting up tools I can't explain to a team in a few words like sops or git-crypt, just to store few files with environment variables or secrets, so I built lockenv as a simple alternative. It's basically a password-protected vault file you commit to git. No gpg keys, no cloud, just lockenv init, set a password, and lock/unlock the secrets. This tool integrates with OS keyring, so you're not typing passwords constantly. Should work on Mac/Linux/Windows, but I tested it only on linux so far. I am not trying to replace any mature / robust solution, just…

More life & fun this month

the category →
  • TL

    Life & fun · 10d ago · louisabraham.github.io

  • Photosynthesis fires two of your iPhone

    Life & fun · 29d ago · photosynthesis.camera

  • SoloUno310

    Take control of hair pulling, nail biting & skin picking

    Life & fun · 28d ago · solouno.io

  • Scroll through all 43,252,003,274,489,856,000 reachable Rubik's Cube permutations.

    Life & fun · 27d ago · everycube.alen.is

  • The Interactive 3D Encyclopedia

    Life & fun · 21d ago · expeditione.fun

  • Hi HN, I built Eigendrum, a web tool that solves the 2D wave equation for arbitrary shapes so you can hear what they sound like as drums. How it works: * Solves -∇²u = λu using finite element analysis (Kφ = λMφ) on a triangle mesh. * Validated to <0.1% error against closed-form solutions for circles (Bessel zeros) and rectangles. * Sound model factors in strike location, Rayleigh damping, and mallet width. * Includes Kac drums I & II to demonstrate identical sound spectra from different geometries. * No frameworks, build steps, or dependencies. Repo and tests:…

    Life & fun · 27d ago · baselashraf81.github.io

Launched alongside, December 2023

the whole month →
  • BM

    Hi HN! I’m proud to share that we have built a real 3rd party iMessage client for Android. We did it by reverse engineering the iMessage protocol and encryption system. It's available to download today (no waitlist): https:&#x2F;&#x2F;play.google.com&#x2F;store&#x2F;apps&#x2F;details?id=com.beeper.ima and there's a technical writeup here: https:&#x2F;&#x2F;blog.beeper.com&#x2F;p&#x2F;how-beeper-mini-works. Unlike every other attempt to build an iMessage app for Android (including our first gen app), Beeper Mini does not use a Mac server relay in the cloud. The app connects directly to Apple…

    Commerce · 2023 · beeper.com

  • HA

    Hey! I made Heynote entirely for my own use case. For many years, I always had an Emacs instance running with the scratch buffer open, even long after I had abandoned Emacs as my programming editor in favor of more recent IDE:s. The simplicity of having just one big scratch buffer appeals to me, but I still want to separate the different things I jot down somehow (without using tabs or similar). Previously, my solution was to insert a bunch of blank lines between the notes, but hitting C-A would still select the entire buffer. That's why I came up with the concept of "blocks", which turned…

    Work · 2023 · heynote.com

  • LogoFast988

    Make beautiful logos with AI, fast & free

    AI · 2023 · logofa.st

  • FuseBase941

    Client collaboration platform for professional services

    Dev tools · 2023 · thefusebase.com

  • Beep! 2.0871

    Fastest tool to assign and share visual tasks with your team

    Work · 2023 · justbeepit.com

  • Clean up your inbox in minutes, open source

    AI · 2023 · getinboxzero.com