@varlockdev

AI-safe .env files: schemas for agents, secrets for humans.

 The internet
varlock.dev
Joined February 2024
  • Tweets225
  • Following260
  • Followers370
4Media
varlock.dev retweeted
zot24 🫠
@zot24Sep 29
This is pretty cool @varlockdev + 1Password plugin to populate .env files automagically
1
1
2
92
My new "awesome list" of SaaS replacements & tools you can host (for free/$5) on your own @CloudflareDev account has over 800⭐️ in just 1 week! Can we make it to 1000 before birthday week? github.com/theoephraim/aweso…

GitHub - theoephraim/awesome-cloudflare-selfhosted: 🍊☁️ Open-source* apps that replace SaaS...

🍊☁️ Open-source* apps that replace SaaS product + tools, running in your own Cloudflare account - theoephraim/awesome-cloudflare-selfhosted

github.com
16
15
1
208
20,131
varlock.dev retweeted
Rajat
@rajatsandeepsenSep 21
I created new repo using @amanvarshney01's Better-Stack just to try out the latest @varlockdev tool it already created the entire config for me 😭🔥
2
4
401
🧙‍♂️📈 onwards and upwards open sourcerers!
Theo Ephraim 🧙‍♂️
@theozeroSep 17
🧙‍♂️⭐️ Varlock inching towards 5k stars - thank you to all the new ones! First huge bump came from @syntaxfm (thanks @wesbos + @stolinski!) The current increase in slope is because I finally figured out how X works 😂
5
587
🧙‍♂️✨ CAST SUMMON SPELL
Steve McNiven-Scott@stevemcnivenSep 16
github.com/dmno-dev/varlock/… Anyone from the @laravel space maybe want to weigh in on how to pull off proper @varlockdev integration? @taylorotwell ? They seem open to doing it right.

[Feature Request] Support for Laravel Framework? · Issue #359 · dmno-dev/varlock

Description Support for Laravel Framework? Motivation No response Proposed Solution No response Alternatives No response Additional Information No response

github.com
1
270
😍 varlock codegen for @EffectTS_ config! Stoked to see the codegen stuff I added enable new integrations from the community. @danmyles_ - should we migrate this into the monorepo? github.com/dan-myles/varlock…

GitHub - dan-myles/varlock-effect-plugin: Varlock code generator for Effect Config

Varlock code generator for Effect Config. Contribute to dan-myles/varlock-effect-plugin development by creating an account on GitHub.

github.com
2
1
8
361
Sam, Dario, Elon, @theo and I (also Theo) think @varlockdev is cool as hell.
Theo - t3.gg
@theoSep 15
Replying to @theozero
Wait this looks cool as hell. @jullerino have you seen this?
6
1
51
4,694
varlock.dev retweeted
MMIK@mmikhanSep 15
Replying to @theo @theozero @jullerino
dude is late in the party, varlock just solves the env management for everything
1
3
662
varlock.dev retweeted
colinhacks
@colinhacksSep 6
Nothing solves env loading and validation better than Varlock. Nub v0.7 adds first-party support. If your repo contains an .env.schema file, Nub uses Varlock to load/validate your environment when running a file or script 👇
Theo Ephraim 🧙‍♂️
@theozeroSep 4
🛑 .env.example is an anti-pattern - copy-paste means it gets out of sync - mix of real values and placeholders - source of truth is scattered (real env file, validation code, usage sites, readme) - no way to understand which items are sensitive .env.schema is the answer!
12
9
1
369
32,929
varlock.dev retweeted
colinhacks
@colinhacksSep 5
Replying to @w3tsadev @theozero
Zod for env validation is a great pattern, and it's super nice to avoid env.d.ts generation I'm a huge Varlock fan though becuase Varlock solves a bunch of other problems beyond just validation. because it wraps your process, Varlock + .env.schema lets you specify LOADING config in addition to just variable validation. that's why its able to do things like stdio-level redaction, encryption, credential brokering, etc. Zod is just a library so it structurally can't do these things. I'd also argue from an API design standpoint that Varlock's DSL is strictly better than Zod as a mechanism for validation because it's so finely tuned to the kinds of values & validations you commonly need for env vars
1
2
2
31
8,323
varlock.dev retweeted
John Gannon
@johnmgannonAug 30
Replying to @alexiskold
my friends @varlockdev have the env var layer covered for those VMs and SDKs
1
3
285
If you have starred varlock already, what are you waiting for? Help us get to 5k ⭐️ 🧙‍♂️🔐❤️
3
4
11
1,077
varlock.dev retweeted
dan myles@danmyles_Aug 25
varlock has to be the best OSS project ive run into in a whileee
1
1
4
845
varlock.dev retweeted
Max Howell@mxclAug 20
No need to fear Full Access for your agents. 1. Use macOS TCC (Transparency, Consent, and Control): lock down your agent’s harness so it cannot access your personal data & .app settings 2. Use @varlockdev to stop it getting at your project keys 3. Use @AutomicVault to stop it getting at your CLI tool credentials and to add granular access control for the rest of your dev-tool stack
1
4
8
1,431
Latest batch of @github secure open source fund is kicking off. This is a great program - provides $10k and deep security training to open source maintainers of important projects. If you are doing OSS, apply! (Varlock was in the last batch) github.blog/open-source/main…

What 50 open source projects taught us about security in the AI era

See how the projects in the GitHub Secure Open Source Fund combined AI-assisted workflows, maintainer expertise, and more to improve project security.

github.blog
1
3
9
524
Super stoked that nub (as of v0.7) has native varlock support 🚀 Nub does usual .env file loading itself, but if it detects a .env.schema and varlock is installed, it will defer to us instead. Huge thanks @colinhacks for this and all his work on nub! nubjs.com/docs/runtime/varlo…

Varlock

First-party Varlock support — a project carrying an env-spec schema turns off Nub's own environment loading and defers to Varlock, using whichever Varlock the project or your PATH provides.

nubjs.com
4
3
27
838
varlock.dev retweeted
Tri
@TridhatriVAug 9
Replying to @varlockdev
@varlockdev my goat
Serge
@sergicalAug 8
Replying to @Rasmic
let me put you onto varlock.dev

Varlock - AI-safe .env files | varlock

AI-safe .env files: schemas for agents, secrets for humans. Validate, secure, and share environment variables with type-safety, leak prevention, and integrations for Next.js, Vite, Astro, and more.

varlock.dev
1
2
323
varlock.dev retweeted
Darcy Clarke
@darcyAug 4
Excited to share vlt 1.0 along with our hosted registries & ecosystem mirrors now GA! A drop-in npm replacement, built so nothing runs on your machine just because you typed install. → faster delivery → malware blocking at the registry layer → graph-native querying – at Toronto, Ontario
21
35
16
143
40,767
Replying to @stolinski
Yup varlock has been a productivity booster. In dev environment I pair it with keychain access and that makes working in git worktrees such a breeze. No need to add .env files per worktree or even copy them.
1
1
3
156
varlock.dev retweeted
Ben Vinegar
@bentlegenAug 2
Varlock is basically types for .env files It’s another deterministic check you can add to keep your agents from misbehaving
colinhacks
@colinhacksAug 2
Been using Varlock to validate environment variables A unified .env.schema file to configure env loading+validation. So good. 🎯 specifies what .env files to load 🦺 defines var allowlist 💎 validates (url/port/regex/enum/etc) ◼️ auto-redacts secrets ⚡️ `varlock run -- <cmd>`
4
5
1
110
11,688
Load more