TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Show HN: ddot – Create short-living .env files from your Password Manager

1 点作者 pmdfgy4 个月前
Hey HN,<p>I&#x27;ve just released a small utility tool I made in Go, to create short-living .env files from your password manager. At this moment, it&#x27;s compatible with bitwarden and 1Password.<p>It&#x27;s not a super fancy project, but I&#x27;ve been using it for a long time now, and thought others would like to use it as well.<p>Why did I build this ?<p>First, for fun and to practice Go.<p>Second, in terms of security, I&#x27;ve always found it a little bit odd to have .env files lying around in clear on our disks. Especially when they contain sensitive secrets. We&#x27;ve seen a surge of attacks against developers with malicious npm packages exfiltrating .env files to steal credentials and crypto wallets. Although this does not protect completely, it&#x27;s still better than nothing.<p>Finally, I once lost a .env file because of a wrong action. Since it was not under source control (for basic good practice), I had to create it all over again. Super painful.<p>Would love your feedback on it. Please note that it&#x27;s still a work in progress and I&#x27;ve only tested it on mac arm64.<p>NOTE : the source code is not available yet as I want to clean it and document it correctly first. Typically, I have a Provider interface currently implemented with File, bitwarden cli and 1Password cli. But I want to add more implementations in order to find the good trade-off between not abstracting and abstracting too much.<p>NOTE 2 : As stated in the README, password managers already provide solutions for this problem but I simply didn&#x27;t like how they are &quot;too invasive&quot; in the development workflow.<p>Cheers.

暂无评论

暂无评论