envy

Envy is a local-first secret management tool that encrypts sensitive data using AES-256-GCM, ensuring that secrets are never stored in plaintext, whether on disk or in version control. Its key features include zero-trust storage with master key protection in the OS Keychain, memory-safe secret injection with automatic zeroing of sensitive data, and GitOps-native workflows that allow teams to manage secrets securely without reliance on external services. Additionally, Envy provides a pre-encrypt audit trail for visibility before sealing changes, facilitating multi-team access control with separate passphrases.