skret

Secrets without the server. A CLI wrapper over the cloud-provider secret managers you already pay for.

Why skret?

Multi-provider

First-class AWS SSM Parameter Store plus a local YAML provider today, with OCI Vault, Azure Key Vault, and GCP Secret Manager on the roadmap. Switch backends without changing how your team works.

Zero lock-in

Secrets live in your own cloud account under IAM policies you already manage. No SaaS control plane, no new billing line.

Import & sync

Migrate existing config from Doppler, Infisical, or dotenv files. Sync outward to GitHub Actions repository secrets with one command.

Env injection

skret run -- your-command hydrates process env vars at launch — no wrapper scripts, no hard-coded keys, no secret files on disk.

Install

macOS / Linux (one-shot)

curl -fsSL https://skret.n24q02m.com/install.sh | sh

Windows (one-shot)

iwr -useb https://skret.n24q02m.com/install.ps1 | iex

Homebrew

brew install n24q02m/tap/skret

Go developers

go install github.com/n24q02m/skret/cmd/skret@latest

See Installation for Scoop, mise, Nix, and verified binaries.