HN Showcase
Back to browse
GitHub Repository

enject: Hide .env secrets from prAIng eyes: secrets live in local encrypted stores (per project) and are injected directly into apps at runtime, never touching disk as plaintext.

500 starsRust

enveil – hide your .env secrets from prAIng eyes

by parkaboy·Feb 24, 2026·201 points·131 comments
Visit ProjectView on HN

AI Analysis

●●●BangerSolve My ProblemNiche GemShip It

Stops AI tools from reading .env files by never storing secrets as plaintext on disk.

Strengths
  • •Addresses a real, verified security gap that has happened to the author multiple times
  • •AES-256-GCM with Argon2id and proper nonce handling—cryptography is done correctly, not hand-waved
  • •Zero dependency on third-party services (unlike 1Password variant), fully self-contained CLI
Weaknesses
  • •Narrow audience—only matters if you use AI coding tools AND run untrusted code
  • •No Windows support mentioned, binary blob store may feel opaque to security auditors
Target Audience

Full-stack and backend developers using AI coding assistants (Claude Code, Copilot, Cursor)

Similar To

1Password secret injection · dotenv-vault

Similar Projects