
Product
Introducing Webhook Events for Alert Changes
Add real-time Socket webhook events to your workflows to automatically receive software supply chain alert changes in real time.
Module that loads data from Docker Secrets into process.env with zero-dependency
npm install sw-env
{
dir: '/run/secrets', // The location of the mount point within the container
encode: 'utf8', // ReadFileSync encoding
override: false // Override existing environment
}
Create Docker secrets using the command line.
echo "your-password" | docker secret create DB_PASSWORD -
echo "your-username" | docker secret create DB_USERNAME -
Or using a text file that contains the value of the secret.
docker secret create DB_USERNAME /path/to/username.txt
docker secret create DB_PASSWORD /path/to/password.txt
Or in your docker-compose.yml
version: "3.8"
services:
app:
image: node:latest
secrets:
- DB_USERNAME
- DB_PASSWORD
deploy:
mode: replicated
replicas: 1
secrets:
DB_USERNAME:
name: DB_USERNAME
file: /path/to/username.txt
DB_PASSWORD:
name: DB_PASSWORD
file: /path/to/pwd.txt
Reading and using Docker secrets in Node.js:
import swenv from 'sw-env';
// ... As early as possible in your App
const options = {}
swenv(options)
console.log(process.env.DB_USERNAME) // your-username
console.log(process.env.DB_PASSWORD) // your-password
// or ...
const secrets = swenv()
console.log(secrets.getSecrets()) // Object contain all container secrets
Use and abuse at your own risk.
FAQs
Module that loads data from Docker Secrets into process.env
We found that sw-env demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Add real-time Socket webhook events to your workflows to automatically receive software supply chain alert changes in real time.

Security News
ENISA has become a CVE Program Root, giving the EU a central authority for coordinating vulnerability reporting, disclosure, and cross-border response.

Product
Socket now scans OpenVSX extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.