Huge News!Announcing our $40M Series B led by Abstract Ventures.Learn More
Socket
Sign inDemoInstall
Socket

infisical

Package Overview
Dependencies
Maintainers
1
Versions
47
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

infisical

Sync .env files simply, securely

  • 1.0.28
  • Source
  • npm
  • Socket score

Version published
Weekly downloads
37
decreased by-47.14%
Maintainers
1
Weekly downloads
 
Created
Source

Infisical

Infisical is a simple, end-to-end encrypted (E2EE) platform that enables dev teams to sync and manage their environment variables.

What’s New

Infisical enables dev teams to pull and inject environment variables directly from the platform into their local processes just by modifying their start/dev scripts.

It also supports git-like pull/push commands to sync and share .env files manually via CLI if needed.

Usage

Head over to https://infisical.com to make an account and create a workspace for your project. Once you've made an account, populate the workspace with your environment variables and invite your team.

Once you’ve done that, return here to pull and inject secrets from the workspace to your local process/project.

Step 1: Modify your dev script

Infisical works with many commands including node, nodemon, next, etc. by pulling and injecting secrets into your local environment during development. Assuming that you’ve nodemon installed, go ahead and modify the dev script in your package.json as follows:

"scripts": {
	...
	"dev": "npx infisical dev nodemon index.js"
}

Note: You can specify which environment you wish to pull and inject your variables from; options include dev, staging, and prod.

Step 2: Run your dev process

Next, start your dev process. If it’s your first time, then follow the prompt to log in and connect the project to your workspace:

npm run dev

Voila, you’re now automatically pulling and injecting secrets into your local environment every time you run your dev script!

Feel free to check out the full usage documentation and list of commands here.

How it Works

Infisical uses end-to-end encryption to securely store and share secrets. It uses secure remote password (SRP) to handle authentication and public-key cryptography for secret sharing and syncing; your secrets are symmetrically encrypted at rest by keys decryptable-only by intended parties in your team. Put simply, we've put measures in place so that secrets remain your-eyes-only - all while making minimal user-experience trade-offs.

For a fuller discussion on how it works, head to our website: https://infisical.com

Keywords

FAQs

Package last updated on 14 Sep 2022

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc