https://github.com/stechstudio/keep
PHP toolkit for collaborative, secure management of secrets across applications, environments, and teams. Supports AWS SSM and AWS Secrets Manager. Exports to .env file or direct environment injection.
https://github.com/stechstudio/keep
aws-secrets-manager aws-ssm laravel secrets secrets-management
Last synced: 3 months ago
JSON representation
PHP toolkit for collaborative, secure management of secrets across applications, environments, and teams. Supports AWS SSM and AWS Secrets Manager. Exports to .env file or direct environment injection.
- Host: GitHub
- URL: https://github.com/stechstudio/keep
- Owner: stechstudio
- License: mit
- Created: 2025-08-16T21:03:02.000Z (10 months ago)
- Default Branch: main
- Last Pushed: 2026-03-20T16:14:11.000Z (3 months ago)
- Last Synced: 2026-03-21T07:09:16.212Z (3 months ago)
- Topics: aws-secrets-manager, aws-ssm, laravel, secrets, secrets-management
- Language: PHP
- Homepage: https://stechstudio.github.io/keep/
- Size: 9.38 MB
- Stars: 0
- Watchers: 0
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE.md
Awesome Lists containing this project
README
# Keep
[](https://packagist.org/packages/stechstudio/keep)
[](LICENSE.md)
[](https://github.com/stechstudio/keep/actions/workflows/tests.yml)
**Keep** is your toolkit for secure, collaborative management of application secrets across environments and teams.
## Key Features
- **🔐 Multi-Vault Support** - AWS SSM Parameter Store and AWS Secrets Manager
- **🖥️ Web UI** - Local browser-based interface for visual secret management
- **🚀 Interactive Shell** - Context-aware shell with tab completion for rapid secret management
- **🌍 Environment Isolation** - Separate secrets by environment (local, staging, production)
- **📝 Template Management** - Create, validate, and process templates with placeholders
- **🔄 Bulk Operations** - Import, export, copy, and diff secrets across environments
- **🤝 Team Collaboration** - Share secret management with proper access controls
- **⚙️ CI/CD Ready** - Export secrets for deployment pipelines
- **🚀 Runtime Injection** - Execute processes with injected secrets (no disk writes)
## Quick Example
```bash
# Install
composer require stechstudio/keep
# Initialize
./vendor/bin/keep init
# Interactive shell - the fastest way to work
./vendor/bin/keep shell
# Set a secret
./vendor/bin/keep set DB_PASSWORD "secret" --env=production
# Export to .env
./vendor/bin/keep export --env=production --file=.env
# Create template from existing secrets
./vendor/bin/keep template:add --env=production
# Use template with placeholders to generate .env file
./vendor/bin/keep export --env=production --template=env/production.env --file=.env
# Runtime injection - execute with secrets, no .env file created
./vendor/bin/keep run --vault=ssm --env=production -- npm start
```
## Interactive Shell
The Keep shell provides a context-aware environment for managing secrets:
```bash
$ ./vendor/bin/keep shell
Welcome to Keep Shell v1.0.0
ssm:local> use production
Switched to: ssm:production
ssm:production> set API_KEY
Value: ********
ssm:production> copy API_KEY staging
✓ Copied API_KEY to staging
ssm:production> diff staging production
│ Key │ staging │ production │ Status │
├─────────┼─────────┼────────────┼────────┤
│ API_KEY │ abc... │ abc... │ ✓ │
```
## Web UI
Keep includes a modern web interface for visual secret management:
```bash
# Start the web server
./vendor/bin/keep server
# Custom port (default: 4000)
./vendor/bin/keep server --port=8080
# Don't auto-open browser
./vendor/bin/keep server --no-browser
```
The Web UI provides:
- **Visual secret management** with search and filtering
- **Diff matrix view** comparing secrets across environments/vaults
- **Export functionality** with live preview
- **Import wizard** for .env files with conflict resolution
- **Settings management** for vaults and environments
- **Real-time validation** and error handling
## Documentation
📚 **Full documentation available at [https://stechstudio.github.io/keep/](https://stechstudio.github.io/keep/)**
- [Installation & Configuration](https://stechstudio.github.io/keep/guide/installation)
- [Interactive Shell Guide](https://stechstudio.github.io/keep/guide/shell)
- [Deployment & Runtime](https://stechstudio.github.io/keep/guide/deployment/)
- [AWS Authentication](https://stechstudio.github.io/keep/guide/aws-authentication)
- [CLI Reference](https://stechstudio.github.io/keep/guide/cli/reference)
## License
The MIT License (MIT). Please see [License File](LICENSE.md) for more information.