envchain - store your environment variables more secure

Storing secrets as environment variables is a better approach than hardcoding them into the code, but still, you need to provide them securely. One way is to hardcode them into your shell (.bashrc or .zshrc) but it automatically exposes them to other shell actions. Another way is to use limit usage to only selected directories by using e.g. direnv, but still stored in unencrypted form. Envchain comes to the rescue it uses secure vault and exposes them as command wrapper with password protection. For me, it’s recommended option for your local environment.

comments powered by Disqus

powered by Hugo and Noteworthy theme