AI-safe .env files: schemas for agents, secrets for humans.
The internet
- Tweets 223
- Following 261
- Followers 365
- Likes 559
varlock.dev retweeted
My new "awesome list" of SaaS replacements & tools you can host (for free/$5) on your own @CloudflareDev account has over 800βοΈ in just 1 week!
Can we make it to 1000 before birthday week?
github.com/theoephraim/awesoβ¦
16
15
208
19,833
varlock.dev retweeted
I created new repo using @amanvarshney01's Better-Stack just to try out the latest @varlockdev tool
it already created the entire config for me ππ₯
2
4
387
π§ββοΈπ onwards and upwards open sourcerers!
π§ββοΈβοΈ Varlock inching towards 5k stars - thank you to all the new ones!
First huge bump came from @syntaxfm (thanks @wesbos + @stolinski!)
The current increase in slope is because I finally figured out how X works π
5
457
π§ββοΈβ¨ CAST SUMMON SPELL
github.com/dmno-dev/varlock/β¦ Anyone from the @laravel space maybe want to weigh in on how to pull off proper @varlockdev integration? @taylorotwell ? They seem open to doing it right.
1
212
varlock.dev retweeted
π varlock codegen for @EffectTS_ config!
Stoked to see the codegen stuff I added enable new integrations from the community.
@danmyles_ - should we migrate this into the monorepo?
github.com/dan-myles/varlockβ¦
2
1
8
358
varlock.dev retweeted
Sam, Dario, Elon, @theo and I (also Theo) think @varlockdev is cool as hell.
6
1
52
4,686
varlock.dev retweeted
Nothing solves env loading and validation better than Varlock.
Nub v0.7 adds first-party support. If your repo contains an .env.schema file, Nub uses Varlock to load/validate your environment when running a file or script π
π .env.example is an anti-pattern
- copy-paste means it gets out of sync
- mix of real values and placeholders
- source of truth is scattered (real env file, validation code, usage sites, readme)
- no way to understand which items are sensitive
.env.schema is the answer!
11
9
370
32,830
varlock.dev retweeted
Zod for env validation is a great pattern, and it's super nice to avoid env.d.ts generation
I'm a huge Varlock fan though becuase Varlock solves a bunch of other problems beyond just validation. because it wraps your process, Varlock + .env.schema lets you specify LOADING config in addition to just variable validation. that's why its able to do things like stdio-level redaction, encryption, credential brokering, etc. Zod is just a library so it structurally can't do these things.
I'd also argue from an API design standpoint that Varlock's DSL is strictly better than Zod as a mechanism for validation because it's so finely tuned to the kinds of values & validations you commonly need for env vars
2
30
8,281
varlock.dev retweeted
my friends @varlockdev have the env var layer covered for those VMs and SDKs
1
3
285
varlock.dev retweeted
If you have starred varlock already, what are you waiting for? Help us get to 5k βοΈ
π§ββοΈπβ€οΈ
3
4
11
1,077
varlock.dev retweeted
No need to fear Full Access for your agents.
1. Use macOS TCC (Transparency, Consent, and Control): lock down your agentβs harness so it cannot access your personal data & .app settings
2. Use @varlockdev to stop it getting at your project keys
3. Use @AutomicVault to stop it getting at your CLI tool credentials and to add granular access control for the rest of your dev-tool stack
1
4
8
1,425
varlock.dev retweeted
Latest batch of @github secure open source fund is kicking off. This is a great program - provides $10k and deep security training to open source maintainers of important projects.
If you are doing OSS, apply!
(Varlock was in the last batch)
github.blog/open-source/mainβ¦
1
3
9
524
varlock.dev retweeted
Super stoked that nub (as of v0.7) has native varlock support π
Nub does usual .env file loading itself, but if it detects a .env.schema and varlock is installed, it will defer to us instead.
Huge thanks @colinhacks for this and all his work on nub!
nubjs.com/docs/runtime/varloβ¦
4
3
27
837
varlock.dev retweeted
Excited to share vlt 1.0 along with our hosted registries & ecosystem mirrors now GA!
A drop-in npm replacement, built so nothing runs on your machine just because you typed install.
β faster delivery
β malware blocking at the registry layer
β graph-native querying
21
35
144
40,625
varlock.dev retweeted
Yup varlock has been a productivity booster. In dev environment I pair it with keychain access and that makes working in git worktrees such a breeze. No need to add .env files per worktree or even copy them.
1
1
3
156
varlock.dev retweeted
Varlock is basically types for .env files
Itβs another deterministic check you can add to keep your agents from misbehaving
Been using Varlock to validate environment variables
A unified .env.schema file to configure env loading+validation. So good.
π― specifies what .env files to load
π¦Ί defines var allowlist
π validates (url/port/regex/enum/etc)
βΌοΈ auto-redacts secrets
β‘οΈ `varlock run -- <cmd>`
4
5
110
11,679
varlock.dev retweeted
Varlock rules. A must have for me
Been using Varlock to validate environment variables
A unified .env.schema file to configure env loading+validation. So good.
π― specifies what .env files to load
π¦Ί defines var allowlist
π validates (url/port/regex/enum/etc)
βΌοΈ auto-redacts secrets
β‘οΈ `varlock run -- <cmd>`
3
4
78
14,398