gss — GitHub Secret Sync

Sync .env files to GitHub repository secrets.

Install

npm i -g @rusintez/gss

Usage

# Push secrets from .env to current repo
gss push .env

# Push from .dev.vars to a specific repo
gss push .dev.vars -r owner/repo

# Push from JSON format
gss push .production.env.json

# Push to a GitHub environment
gss push .env -e production

# Push and remove secrets not in the file
gss push .env --prune

# Preview without making changes
gss push .env --dry-run

# List remote secret names
gss pull

# Compare local file vs remote
gss diff .env

# Convert between formats
gss fmt .env --json          # .env → JSON
gss fmt .production.env.json --env  # JSON → .env

File formats

.env / .dev.vars

DATABASE_URL=postgres://localhost/db
API_KEY=sk-123
# comments and empty lines are stripped

.production.env.json

{
  "DATABASE_URL": "postgres://localhost/db",
  "API_KEY": "sk-123"
}

Requirements

• GitHub CLI (gh) installed and authenticated