Skip to content

Engineering / Open resources

EnvRune

A Go CLI that replaces .env files with an encrypted vault: secrets are referenced by name in a versionable envrune.yml and injected straight into the process, with masked output and end-to-end encrypted team sharing.

Open repository

Contribution tasks

Proposals based on source inspection, awaiting maintainer review. Check the current version and existing issues before submitting. The link opens a draft: you review it and decide whether to publish.

Source inspected on

Show changed references in environment diffs

diff.go groups missing variables and identical references, but omits a variable present in both environments with different references. The existing test already uses DATABASE_URL with shop.db.dev and shop.db.prod without checking that difference in the output.

Estimated size
S · 2–4 hours
Skills
Go · CLI · YAML

Files and evidence

Step-by-step acceptance criteria

  1. Extend the existing fixture to require DATABASE_URL and its source and destination references in a differences section.
  2. List variables present in both environments with different references in alphabetical order.
  3. Preserve current exit codes: different references with matching keys still return 0; missing keys still return 1.
  4. Run go test ./internal/cli; verify diff works with a locked vault and displays reference names only, never secret values.
Review draft on GitHub

How to start contributing

Links come from the portfolio catalog; check availability, license and open tasks in each repository. Read the README and license, run the project and propose a small documentation improvement or a reproducible test case. Discuss larger changes with the maintainer first.

Repository
Read the README

Project evidence

EnvRune