varlock.dev

varlock.dev

@varlock.dev

Building the future of configuration for humans and non-humans varlock.dev

107 followers352 following65 posts

varlock.dev reposted

Theo Ephraim
@theozero.bsky.social

Varlock now includes "credential brokering" functionality - your agent (or whatever process) gets only _placeholder_ credentials, and real secrets are swapped in over the wire (MITM proxy). Rules are configured in your existing .env.schema Would love to hear your feedback!

varlock.dev reposted

Theo Ephraim
@theozero.bsky.social

Super fun chatting with @brandonwhichard.com about varlock. He is a real user - found us through a listener and has been using it ever since. Have a listen! 🎧

Software Defined Talk@softwaredefinedtalk.com

Every project has environment variables. Almost nobody manages them well. This week @brandonwhichard.com talks with Phil Miller and @theozero.bsky.social, who built varlock to fix that — bringing structure and security to the humble .env file. https://www.softwaredefinedtalk.com/580

softwaredefinedtalk.comVarlock: Bringing Order to the Chaos of Environment VariablesEvery project has environment variables. Almost nobody manages them well. This week Brandon talks with Phil Miller and Theo Ephraim, who built varlock to fix that — bringing structure and security to the humble .env file.

varlock.dev reposted

Brandon Whichard
@brandonwhichard.com

The .env file: every project has one, almost nobody manages it well. This week I sat down with the founders of varlock to talk about fixing that.

Software Defined Talk@softwaredefinedtalk.com

Every project has environment variables. Almost nobody manages them well. This week @brandonwhichard.com talks with Phil Miller and @theozero.bsky.social, who built varlock to fix that — bringing structure and security to the humble .env file. https://www.softwaredefinedtalk.com/580

softwaredefinedtalk.comVarlock: Bringing Order to the Chaos of Environment VariablesEvery project has environment variables. Almost nobody manages them well. This week Brandon talks with Phil Miller and Theo Ephraim, who built varlock to fix that — bringing structure and security to the humble .env file.

varlock.dev reposted

Theo Ephraim
@theozero.bsky.social

Say hello to 🐣 fledgling - a new tool to create new npm packages and setup/sync trusted publishing (OIDC) settings. Works great for one offs, but even better in a monorepo! just `npx fledgling`

varlock.dev reposted

Darcy Clarke
@darcyclarke.me

⚡️ We're looking for a DevRel person at @vlt.sh - based in our Toronto 🇨🇦 HQ. You'll work closely w/ me & should love the idea of owning various aspects of product marketing. You'll be vlt's biggest fan & advocate; molding this unique role in a way that plays to your strengths & ours.

varlock.dev reposted

Theo Ephraim
@theozero.bsky.social

Replying to @en.sitnik.es

This is an awesome writeup! Another helpful precaution I've been yelling about: get EVERY secret out of plaintext. Many malicious scripts are harvesting creds from .env and other config files. varlock.dev can help

varlock.devVarlock - AI-safe .env filesAI-safe .env files: schemas for agents, secrets for humans. Validate, secure, and share environment variables with type-safety, leak prevention, and integrations for Next.js, Vite, Astro, and more.

varlock.dev reposted

Digital Brain
@yourdigitalbrain.bsky.social

Unlock the potential of your AI projects with dmno-dev/varlock. Secure your .env files with schemas designed for agents and secrets meant for humans. https://sinapti.ca/post/en/varlock-typed-schema-environment-variables-to-protect-secret-w6tei9mw

sinapti.caVarlock: typed schema environment variables to protect secrets in AI projects, over 3,000 stars on GitHub - SinapticaIf you use AI agents for programming, you already know the risk: the assistant reads your work environment and, with it, your secrets. Varlock elegantly solves
varlock.dev
@varlock.dev

😀

Schalk Neethling@schalkneethling.com

Stop Storing Secrets on Disk — Replace Your .env With @varlock.dev and 1Password | How I replaced my local .env file with Varlock and 1Password, gaining type safety, validation, secret scannin... | schalkneethling.com/posts/stop-s...

schalkneethling.comStop Storing Secrets on Disk — Replace Your .env With Varlock and 1PasswordHow I replaced my local .env file with Varlock and 1Password, gaining type safety, validation, secret scanning, and a single source of truth for environment variables.

varlock.dev reposted

GitHub
@github.com

Who knows how to secure open source better than the maintainers themselves? 🛡️

varlock.dev reposted

Ben Vinegar
@benv.ca

🇨🇦 Devtools Toronto is returning Tues, Nov 4th at BDC Community Square. Featuring hands-on demos from 1Password, Tempo, Keyflow, Wispbit, and Varlock (DMNO) 👇 RSVP link below

varlock.dev
@varlock.dev

Just tested and it works with varlock.dev!

Phil@philjohnstonii.bsky.social

#developers - 1Password just released a feature to host .env files in @1password.bsky.social . It’s pretty rad, gives a central location to manage and share .env’s with a team too! Use managed .env files as any other, but Git does not track them so they won’t be committed! 🥳 tinyurl.com/1passenv

tinyurl.comIntroducing new .env file support in 1Password | 1Password CommunityToday, we’re introducing a first-of-its-kind feature available in the 1Password Desktop app.With the new local .env file destination in 1Password...
varlock.dev
@varlock.dev

Great to meet you and can't wait to try your game!

Seve Savoie Teruel@techsev.bsky.social

Thank you to @sentry.io & @sanity.io for sponsoring the event, to Super.com for hosting us, Toronto.js, @gitnation.bsky.social and @reactadvanced.gitnation.org for organizing, @serg.tech for MC-ing the event and my fellow speaker Phil from @dmno.bsky.social .

super.comsuper.com

varlock.dev reposted

Nick Taylor
@nickyt.online

A critical feature launch turns sour when key analytics go missing! Discover the common pitfalls in deployment, from overlooked post-production keys to staging vs. prod discrepancies. 🙈 Varlock from @dmno.bsky.social to the rescue! #cicd #environmentvariables #typesafety

varlock.dev reposted

Nick Taylor
@nickyt.online

Replying to @theozero.bsky.social

Here's the PR with what we did on the live stream. Thanks again for hanging Theo Ephraim and Phil Miller! github.com/nickytonline...

github.comchore: add environment configuration and integrate varlock by nickytonline · Pull Request #22 · nickytonline/nickyt.liveThis pull request introduces environment variable management using the Varlock library and its Astro integration. It standardizes how environment variables are accessed throughout the codebase, imp...
varlock.dev
@varlock.dev

🧙‍♂️👀

Erfan Ebrahimnia@erfanebrahimnia.bsky.social

🔥 Next.js Weekly #94 → Next.js 15.4 & a look at v16 – @nextjs.org → Better Env Vars with varlock – @dmno.bsky.social‬ → Headless Waitlist → Animating in Public – Emil Kowalski → i18n-check – @lingualdev.bsky.social‬ → Ultracite overview (link below)

varlock.dev reposted

Josh W. Comeau
@joshwcomeau.com

🔥 My friends at DMNO have a new devtool: varlock. It’s a drop-in replacement for dotenv, and adds a bunch of cool stuff like validation and type safety. It stores the secrets themselves in password managers or encrypted vaults. The landing page also has a very cool RPG vibe 😄 varlock.dev

View full thread
varlock.dev
@varlock.dev

And finally if you're a library or platform that interacts with .env files, we'd love for you to have a look at our @env-spec RFC github.com/dmno-dev/var... Anyone who uses .env files can benefit from this DSL.

github.com@env-spec initial specification · dmno-dev varlock · Discussion #17RFC-0001: @env-spec - A Specification for Enhanced .env Files Author(s): @philmillman @theoephraim Status: Proposed Date Created: 2025-05-13 Last Updated: 2025-05-13 Related Issues/PRs: 1. Summary ...

varlock.dev reposted

Theo Ephraim
@theozero.bsky.social

Over at @dmno.bsky.social, we use our @1password.bsky.social plugin every day - keeping our secrets synced, validated, and secured behind biometric unlock - away from prying AIs 🚫🤖 Incredibly proud to share we are the first feature on their new developer blog ❤️

1password.communityDeveloper spotlight: How DMNO is building on 1PasswordDMNO is a configuration toolkit for development and deployment workflows. Learn how the DMNO team leveraged 1Password CLI and SDKs to build a plugin that...