EnvSeal CLI
github.com/viswajith275/envseal-cli- Category
- Developer Tools
- Rank
- No. 3544Tools index
Previous survey · No. 3349 ·
- Pricing
- Open Source
- Type
- TOOL
- Use case
- Security & Identity
- Interfaces
- CLI
- GitHub
- 10 stars
- Latest release
- v6.3.0
- Date
About
EnvSeal CLI is an offline, Git-native secrets manager that stores an encrypted vault as a regular file in your repository, using SSH keys and Age encryption so each secret is readable only by the people it's encrypted for. Because the vault is just a repo file, it can be switched by branch and merged like ordinary code rather than managed through a separate secrets service.
At a glance
EnvSeal CLI keeps environment values and files such as certificates in an encrypted vault and makes them available at runtime. It is worth evaluating if a local project needs both text secrets and file-based credentials and you want to inspect how they reach a command.
Good fit
Developers testing a vault workflow for local tools or development services.
Consider something else when
Use your organization’s managed secret store when access and rotation must be administered centrally.
Start here
Use a disposable repository and a dummy credential file. Run a harmless command and verify when the file appears and what remains after the command exits.
Cost and requirements
MIT-licensed Rust CLI. The project documents platform-specific setup and runtime decryption.
Limits to know
A process that receives a decrypted value or file can read it. Test cleanup and recovery before adopting the workflow for real credentials.
Sources checked 2026-11-05. Source-based assessment.
Why it made the leaderboard
EnvSeal keeps secrets as an encrypted file inside your repo, switched by branch and mergeable like code, using existing SSH keys and Age encryption instead of standing up a separate secrets service.
Tags
Tech Stack
Comments (0)
No comments yet
Editorially curated, with community endorsements as a secondary signal. Corrections welcome.