env-secrets icon indicating copy to clipboard operation
env-secrets copied to clipboard

Securely fetch and set env secrets needed for a project using Bitwarden or 1password CLI

env-secrets

Build Status codecov

Securely fetch and set env secrets needed for a project using Bitwarden or 1password CLI

Prerequisites

Each of the available password managers (1password and Bitwarden) need to have their CLI installed, ofc you need to install only the one you will use. For Bitwarden installation instructions are located here, and for 1passsword here.

Env-secrets is only a wrapper around the CLI so you'll need to be sure you can use their CLI as it is before using env-secrets. You'll surely need to login, here are the instructions for Bitwarden and 1password.

Usage

Both commands works the same way: you first need to organize your secrets into folders for Bitwarden and tags for 1password.

NB: For now I've only tested with Secure Notes in Bitwarden, and Password in 1password as item type.

Then you should be able to do:

env-secrets [bw || 1p] [--domain=<OP_DOMAIN>] <FOLDERS/TAGS> ...

NB: The op command needs an additional flag --domain corresponding to the subdomain of your vault's URL.

Install

For now you'll need to have go installed and build binary yourself. I will make release in the future.