Repolode
Submit
HugoRCD

HugoRCD/shelve

Open-source secrets and environment variable manager with a web dashboard, a CLI, and GitHub Actions sync.

Open-source alternative to:Doppler1Password Secrets Automation

View on GitHubWebsite
Stars
462
Forks
43
Open issues
18
Last commit
5 hours ago

What is it?

Shelve is a platform for storing, organizing and syncing environment variables and secrets across projects and environments such as dev, staging and prod. It replaces scattered .env files and loose API keys with one centralized vault that teams can share.

Secrets are stored with SHA-256 hashing and AES-256 encryption at rest. Developers can fetch, push and inject secrets from the terminal with the @shelve/cli package, including a `shelve run` command, or sync them to GitHub Actions and repository secrets through the official GitHub App. Teams can organize work into workspaces and assign Owner, Admin or Member roles.

The project is built with Nuxt, Nitro, PostgreSQL and Drizzle ORM in a Turborepo monorepo. It can be self-hosted, with Docker and Coolify mentioned as options alongside Vercel deployment.

Key features

  • 01Encrypts secrets with AES-256 and hashes with SHA-256 at rest.
  • 02Manages separate configurations for dev, staging, prod and custom environments.
  • 03Provides a CLI with pull, push and run commands for injecting secrets.
  • 04Syncs secrets to GitHub Actions and repository secrets via a GitHub App.
  • 05Supports workspaces with Owner, Admin and Member roles.

Use cases

  • Sharing environment variables across a team without committing .env files to Git.
  • Syncing deployment secrets into GitHub Actions workflows.
  • Injecting secrets into local commands with a CLI during development.
  • Self-hosting a secrets manager on your own infrastructure.

Quick start

  1. 1

    Open the Shelve getting-started documentation for setup instructions

  2. 2

    Install the CLI from the @shelve/cli npm package, following the docs

Things to know

  • The README gives no install command, so setup depends on the external documentation.
  • The README documents self-hosting only for Vercel.

In collections

Self-hosted appsCLI & terminal toolsSecurity scanners, audits & threat intel tools

Topics

#secrets-management#environment-variables#cli#github-actions#security#self-hosted#developer-tools#collaboration#developer-experience#env

FAQ

What is shelve?
Open-source secrets and environment variable manager with a web dashboard, a CLI, and GitHub Actions sync. Shelve is a platform for storing, organizing and syncing environment variables and secrets across projects and environments such as dev, staging and prod. It replaces scattered .env files and loose API keys with one centralized vault that teams can share.
Is shelve free to use? What license does it have?
shelve is open source under the Apache-2.0 license. Check the license terms before using it in commercial products.
Is shelve still maintained?
Actively maintained. The last commit to shelve was on Nov 7, 2026.
What can I use shelve for?
Sharing environment variables across a team without committing .env files to Git. Syncing deployment secrets into GitHub Actions workflows. Injecting secrets into local commands with a CLI during development. Self-hosting a secrets manager on your own infrastructure.
How do I install shelve?
Open the Shelve getting-started documentation for setup instructions Install the CLI from the @shelve/cli npm package, following the docs
Where can I get shelve?
The source code and installation instructions are on GitHub: https://github.com/HugoRCD/shelve

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects