🙊 undisclosed

Simple CLI tool to handle encrypted secrets, heavily inspired in Symfony Secrets.

With undisclosed you can set and store your credentials encrypted, and dump it in plain whenever you want.

init

Execute undisclosed init to create a default config file template and the folder to store the keys.

generate-keypair

With undisclosed generate-keypair you will generate your keypair. It will be used to encrypt all your data.

⚠️ CAUTION: Never commit your private key files to a version control system.

$ undisclosed generate-keypair
┌─────────┬───────────┬────────────────────────────────────────────┬───────────────────────────┐
│ (index) │   type    │                    path                    │           value           │
├─────────┼───────────┼────────────────────────────────────────────┼───────────────────────────┤
│    0    │ 'public'  │ '/Users/mangel/Workspace/test/public.pem'  │ '-----BEGIN RSA PUBLI...' │
│    1    │ 'private' │ '/Users/mangel/Workspace/test/private.pem' │ '-----BEGIN RSA PRIVA...' │
└─────────┴───────────┴────────────────────────────────────────────┴───────────────────────────┘

list

With undisclosed list you can list the secrets you previously stored.

$ undisclosed list
┌─────────┬────────┬───────────────────────────┐
│ (index) │  key   │           value           │
├─────────┼────────┼───────────────────────────┤
│    0    │ 'USER' │ 'XdnN70UTz1adJZIVUcb1...' │
└─────────┴────────┴───────────────────────────┘

set

With undisclosed set KEY value you can store a new secret or update an existing one.

$ undisclosed set USER root
┌─────────┬────────┬───────────────────────────┐
│ (index) │  key   │           value           │
├─────────┼────────┼───────────────────────────┤
│    0    │ 'USER' │ 'XdnN70UTz1adJZIVUcb1...' │
└─────────┴────────┴───────────────────────────┘

get

With undisclosed get KEY you can retrieve a secret value.

$ undisclosed get USER
┌─────────┬────────┬────────┐
│ (index) │  key   │ value  │
├─────────┼────────┼────────┤
│    0    │ 'USER' │ 'root' │
└─────────┴────────┴────────┘

delete

With undisclosed delete KEY you can delete a secret.

$ undisclosed delete USER

Secret deleted.

dump

With undisclosed dump you can dump all the stored secrets decrypted into a .env file.