Release / Build and publish (push) Successful in 23s
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
81 lines
2.8 KiB
Markdown
81 lines
2.8 KiB
Markdown
# lazysecrets
|
|
|
|
A terminal UI for finding, reading and sharing secrets, inspired by lazygit.
|
|
One place for:
|
|
|
|
- **Azure Key Vault**: secrets, keys and certificates, across every az account
|
|
- **Databricks** secret scopes
|
|
- **SOPS and `.env` files** in your git repos
|
|
|
|
It reads with your existing logins (az, Databricks CLI, sops), never stores
|
|
values, and gives every item a `lazysecrets://` link a colleague can open.
|
|
|
|
Status: early development. See [CHANGELOG.md](CHANGELOG.md) for what's new.
|
|
|
|
## Install
|
|
|
|
On macOS or Linux (arm64 or x86_64):
|
|
|
|
```sh
|
|
curl -fsSL https://git.kebcloud.no/keb/lazysecrets/raw/branch/main/install.sh | sh
|
|
```
|
|
|
|
It installs the latest [release](https://git.kebcloud.no/keb/lazysecrets/releases)
|
|
into `~/.local/bin` after checking it against the release's checksums.
|
|
`sh -s -- v0.2.0` installs a given version, `LAZYSECRETS_INSTALL_DIR`
|
|
somewhere else.
|
|
|
|
lazysecrets looks for a newer release once a day: the footer then shows
|
|
`↑ v0.2.0`, and `U` shows its changelog and updates in place (or run
|
|
`lazysecrets update`).
|
|
|
|
Or build it yourself:
|
|
`go install git.kebcloud.no/keb/lazysecrets/cmd/lazysecrets@latest`.
|
|
|
|
## Get started
|
|
|
|
```sh
|
|
az login # once, if you use Azure; lazysecrets reuses it
|
|
lazysecrets # inside a repo, it opens on that repo's secret files
|
|
lazysecrets --demo # built-in sample data, nothing to sign in to
|
|
```
|
|
|
|
Pick a source on the left, then a vault, then a secret. The keys you'll
|
|
use most:
|
|
|
|
| Key | Action |
|
|
|---|---|
|
|
| `j`/`k`, `h`/`l`, `enter`, `esc` | move, switch panes, drill in, back |
|
|
| `/` | filter the list you're in |
|
|
| `space` | reveal / hide the value |
|
|
| `y` | copy the value (cleared from the clipboard after 30s) |
|
|
| `ctrl+s` | Go to: search everything and jump there |
|
|
| `f` / `F` | star / your favourites |
|
|
| `s` | copy a link to share |
|
|
| `?` | every key, searchable |
|
|
| `q` | quit |
|
|
|
|
## Docs
|
|
|
|
- [Keys](docs/keys.md): every key, Go to, the layout, and rebinding keys
|
|
- [Azure Key Vault](docs/azure.md): accounts, permissions, pinned vaults
|
|
- [Databricks](docs/databricks.md): profiles and Key Vault-backed scopes
|
|
- [SOPS and .env files](docs/repos.md): which repos and files, decrypting
|
|
- [Links](docs/links.md): sharing, opening, `lazysecrets get` in scripts,
|
|
and opening links from the browser and chat
|
|
- [Custom commands](docs/custom-commands.md): run your own commands on a
|
|
secret
|
|
- [Config](docs/config.md): every option, themes, layered configs, the
|
|
state file
|
|
- [Development](docs/development.md): building, tests, pull requests and
|
|
releasing
|
|
|
|
## License
|
|
|
|
Copyright © 2026 Karl-Einar Bergstrøm.
|
|
|
|
lazysecrets is free software: you can redistribute it and/or modify it
|
|
under the terms of the GNU General Public License as published by the Free
|
|
Software Foundation, either version 3 of the License, or (at your option)
|
|
any later version. See [LICENSE](LICENSE).
|