WindKeep is a secrets management platform that helps teams and developers to securely store, manage, and share sensitive information. It features role-based access control, audit routines, encrypted secret storage, and an integrated Command-Line Interface.
- Authentication: OAuth sign-in via Google, GitHub, or GitLab.
- Role-Based Access Control: Control user access to resources at both organization and project levels.
- Secret Management: Create, edit, and delete secrets within projects. Secrets are scoped to a specific environment and encrypted at rest using AES-256-GCM.
- Audit Trail: Sensitive operations are logged and can be inspected to ensure transparency and accountability. Each secret keeps its own history of changes.
- Service Tokens: Generate service tokens for programmatic access to secrets, with environment and expiration date control.
- Command-Line Interface: Interact with the platform directly from the terminal. Provides commands for organization and project management, pull/push operations, and automatic secret injection into local development and CI/CD pipelines.
- Nuxt.js with Vue composition API and Nitro server engine.
- OAuth authentication with Google, GitHub, or GitLab.
- Prisma for PostgreSQL database management.
- Redis for caching and rate limiting.
- Pinia for state management.
- Zod for schema validation.
- TypeScript.
- ESLint.
- Tailwind CSS.
- Go for CLI development using Cobra.
Feel free to reach out to discuss collaboration opportunities or to say hello!
This project is licensed under the MIT License.