Skip to content
@ByReisK

ByReisK

Home of byreis — send secrets, don't see them. Zero-infra GitOps secrets with asymmetric access.
README.md

ByReisK

Send secrets. Not see them.

We build byreis — friendly, zero-infra GitOps secrets management with one defining twist:

Contributors can submit secrets, but only admins can read them.

A contributor encrypts a value to the team's admin public keys and opens a pull request. They never hold a private key, so they can add or update a secret but can never decrypt one. An admin reviews the real value and merges. No server, no vendor backend — just git and modern public-key encryption.

Why it exists

SOPS+age is git-native but symmetric (anyone with a key reads everything); server-based managers need infrastructure; Kubernetes controllers don't fit local/CI flows. byreis fills the gap.

Projects

  • byreis — the CLI. Apache-2.0. Early development.

Status

🚧 Active early development. Architecture and the cryptographic access model are settled; core commands are landing. Open an issue before a PR so the direction can be discussed.

Popular repositories Loading

  1. byreis byreis Public

    Send secrets, don't see them — zero-infra GitOps secrets with asymmetric access. Contributors submit, only admins decrypt.

    Go

  2. .github .github Public

    Org-level profile & community health files for ByReisK

Repositories

Showing 2 of 2 repositories

People

This organization has no public members. You must be a member to see who’s a part of this organization.

Top languages

Loading…

Most used topics

Loading…