Secret-Trove ClI

Easily share secrets and env files with other developers in your team.

This is a CLI tool which is supported by the portal at: https://secret-trove.web.app

Though it protects the secrets through ACL, the files are not encrypted. I would highly recommend encrypting your files if you are worried & then decrypting them again after they are received.

Note

The CLI is only meant to speed up development and onboarding of new devs. DO NOT USE PRODUCTION SECRETS & ENV FILES with it. This is meant purely for development only!

Installation

npm i -g secret-trove

or

yarn global add secret-trove

Setup

These steps only need to be done once.

Step 1:

Go create an account at https://secret-trove.web.app. Create an organization and then a project. Add your developer secrets to the project(s) and update their paths so that the CLI knows where to place them.

Step 2:

Log in to your account through the CLI so it can know your orgs and projects.

secret-trove --login

Step 3:

Go to the root directory of one of your projects and run init. This will create a .secret-trove.json file that identifies the project. This can be committed to the repository safely as it does not contain any credentials. Do this once for every project you want to use the CLI with.

secret-trove --init

Usage

Just use the sync option and it will pulldown all the development secret and env files.

secret-trove --sync

Please use the help command to learn about all the options that this tool provides.

secret-trove --help