vaultline

A gittable and automation friendly secret vault with multi store support, a local-only daemon and a convenient auto-completing CLI.

Quick start

# Create and register a named store
vaultline store init mystore

# Save a secret interactively (input stays hidden)
vaultline secret set mystore:token --stdin

# Read a secret into a file
vaultline secret get mystore:token --out ./token.txt

# Export a secret into current shell context
eval "$(vaultline --output eval-export secret get mystore:token MYSTORE_TOKEN)"

# Cross-store unseal: read unseal material from another store
vaultline store unseal mystore --from-secret superstore:mystore.unseal

Recent operations focus

secret copy / secret move with collision-safe default and explicit --force
store unseal --from-secret <store:key> to retrieve unseal material from another store
reproducible smokey suite with fully isolated runtime state

Docs and releases

use Downloads for release artifacts
use RELEASING.md in repo root for release flow