SecretEnv – Run any process with secrets from all your backends

What it does

In the maker’s words, at launch

Hi Guys, I built SecretEnv to help solve one common thing that I have seen at every org, that I have worked at. We always had more than one password/credential manager. Service tokens maybe in Vault, AWS SSM etc and some team specific service account or temp account credentials being store in another password store such as 1Password or Keeper, there was never one single credential store. This is where SecretEnv comes in play, it runs any command with secrets injected as env vars, sourced from whatever combination of backend your team already uses. I am sure there are other tools as well that do a similar thing, which is run a command and inject secret. However SecretEnv does one thing differently. The key idea is separating two items which are most of the time combined. Think of SecretEnv's resolution structure like an Address Book. - Your repo gets a secretenv.toml file which has labels in there as values against ENV Vars. These can be literally anything. DB_URL, STRIPE_KEY whatever. - You have a registry that lives in your backend that you/your company uses. This registry holds the actual paths so the credentials. - You have a config file on your machine called config.toml that secretenv uses to grab the aliases from secretenv.toml and resolve against registry that lives in your backend. So imagine if you are a Platform Engineer and need to migrate password stores to different backend. You can now migrate secrets from AWS to Vault or change the naming conventions in one central place (registry) without devs having to touch their code or update config file. What this means is if the credential is used by 10, 15 or even 20 repos. All you need to do is update the alias in the registry and all repos pick up the changes. No need to open PR's, involve dev teams. The whole idea was abstracting and decoupling the dependency. The tool currently supports 14 backends already which covers most of the ground. Would love your feedback and if there is any backends or workflow that this does not cover. https://github.com/TechAlchemistX/secretenv

• KC
  KeyEnv – CLI-first secrets manager for dev teams (Rust)Jan 2026 · keyenv.dev · ▲5

  Hi HN, I built KeyEnv because I was tired of the "can you Slack me the Stripe key?" workflow. The problem: My team's secrets lived in a mix of Slack DMs, shared Google Docs, and .env files that definitely weren't in .gitignore at some point. Enterprise tools like Vault required more DevOps time than we had. Doppler was close but felt heavier than we needed. What KeyEnv does: keyenv init # link project keyenv pull # sync secrets to local .env keyenv run -- npm start # inject secrets, run command That's basically it. Secrets are encrypted client-side (AES-256-GCM) before leaving your machine.…

• 
  Lemonade Password ManagerFeb 2026 · ▲98

  Simple, secure, with an Env Vault for your .env files

• 
  1Password Secrets Automation2021 · ▲163

  Secure, orchestrate, and manage infrastructure secrets

• 
  Shelve2025 · ▲156

  Effortless & secure secrets management

• ES
  EnvKey – securely manage API keys, credentials, and config2017 · envkey.com · ▲116
• 
  EnvKey2017 · ▲79

  Protect api keys and credentials. Keep config in sync.

• 
  PaymentKit▲466

  Billing that survives a processor shutdown

  Commerce · 13d ago · paymentkit.com

• 
  Equitybee Benchmark▲241

  Compare your startup equity grant for free.

  Commerce · 26d ago · equitybee.com

• 
  Brew ▲905

  Like Claude design for email marketing

  AI · May 2026 · brew.new

• 
  Kilo Code for VS Code▲897

  Parallel agents, diff reviewer, and multi-model comparisons

  Dev tools · May 2026 · kilo.ai

• 
  StoreClaw▲805

  Grow your store profits with agents that know how to sell

  AI · May 2026 · storeclaw.ai

• 
  PollyReach▲796

  Give your agent a real number and voice to make calls.

  AI · May 2026 · pollyreach.ai

• NW
  Needle: We Distilled Gemini Tool Calling into a 26M Model▲776

  Hey HN, Henry here from Cactus. We open-sourced Needle, a 26M parameter function-calling (tool use) model. It runs at 6000 tok/s prefill and 1200 tok/s decode on consumer devices. We were always frustrated by the little effort made towards building agentic models that run on budget phones, so we conducted investigations that led to an observation: agentic experiences are built upon tool calling, and massive models are overkill for it. Tool calling is fundamentally retrieval-and-assembly (match query to tool name, extract argument values, emit JSON), not reasoning. Cross-attention…

  Life & fun · May 2026 · github.com

• FM
  Files.md – Open-source alternative to Obsidian▲730

  Dev tools · May 2026 · github.com