DEV Community

bossandboss
bossandboss

Posted on

👻 GhostEnv

#git #security #showdev #tooling

Secure your development secrets inside your native OS Keychain without ever polluting your source code or exposing secrets on Git.

GhostEnv is a revolutionary, polyglot, and 100% language-agnostic tool designed to completely eradicate accidental API key and authentication secret leaks on GitHub.

Moving away from obsolete background auto-rewriting and language-specific bootstrap injections (like node -r), GhostEnv introduces an Interactive CLI Terminal UX Flow during Git pre-commits and a Universal Transient Environment Wrapper (ghostenv run).

🚀 Key Features

1. Interactive Git Pre-Commit Hook

No more silent, background file rewrites. When GhostEnv's AST and regex scanner detects secrets in staged files (git diff --cached):

  • Instant Terminal Interaction: The commit pauses and displays an interactive CLI prompt directly in your console.
  • Visual Confirmation (Simulated Git Diff): If you select Option [1] to secure your keys, GhostEnv simulates and displays the exact code changes via a clean, colorized terminal git diff representation.
  • Final [Y/n] Confirmation: Your files are modified and re-staged (git add) only after you give explicit validation.

2. Universal Command Execution Wrapper (ghostenv run)

GhostEnv eliminates the need for language-specific runtime hooks or custom library imports:

  • 100% Language-Agnostic: Works with any language, framework, or process runner.

    ghostenv run -- npm start
ghostenv run -- python main.py
ghostenv run -- docker-compose up

  • In-Memory Enriched Injections: Right before your target application starts, the wrapper extracts the project's secrets from your OS native credentials manager (macOS Keychain, Windows Credential Manager, Linux Secret Service) and injects them strictly into the transient process memory environment variables ($ENV).

  • Zero Local Disk Footprint: Credentials never touch local storage, and they completely evaporate from memory as soon as the child process exits.

3. Premium Performance & Logging

  • Ultra-fast execution path (<300ms before displaying the terminal interactive prompt).
  • Premium terminal layouts featuring intuitive emojis, clean spacing, and readable status indicators.
  • Full backward compatibility with native operating system keychains.

https://github.com/bossandboss/GhosteEnv

Top comments (0)