Skip to content

alltuner/vaultuner

Repository files navigation

vaultuner

Human-readable secrets for Bitwarden Secrets Manager.
Replace cryptic UUIDs with intuitive paths like myapp/prod/db-password.

Docs · Sponsor

PyPI License Stars


Get Started

uv tool install vaultuner

Or run without installing:

uvx vaultuner list

Configure once:

vaultuner config set access-token <your-token>
vaultuner config set organization-id <your-org-id>

Credentials come from Bitwarden Secrets Manager.


What is vaultuner?

Bitwarden Secrets Manager addresses every secret by UUID. Looking one up means digging through the dashboard or memorising hex strings. vaultuner sits on top and lets you address secrets by readable paths organised by project and environment, so retrieving a secret feels like reading a config file:

# Bitwarden CLI
bws secret get 550e8400-e29b-41d4-a716-446655440000

# vaultuner
vaultuner get myapp/prod/db-password

Features

  • Path-based namingproject/env/secret instead of UUIDs.
  • Environment isolation — keep dev, staging, and prod secrets separate.
  • .env sync — export to and import from .env files seamlessly.
  • Secret metadata — attach descriptions via --description.
  • Soft delete — recover accidentally deleted secrets.
  • Keychain storage — credentials secured in the macOS Keychain.

Usage

# Create secrets
vaultuner set myapp/api-key "sk-abc123"
vaultuner set myapp/prod/db-password "hunter2"

# Retrieve
vaultuner get myapp/prod/db-password -v

# List everything
vaultuner list

# Export for local dev
vaultuner export -p myapp -e dev -o .env

Commands

Command Description
list List secrets with project/env filtering
get Retrieve a secret value
set Create or update a secret
delete Soft-delete (recoverable)
restore Recover a deleted secret
export Export to .env file
import Import from .env file
projects List all projects
config Manage stored credentials

Naming convention

PROJECT/SECRET           # Project-level secret
PROJECT/ENV/SECRET       # Environment-specific secret

Examples:

myapp/api-key            # Shared across environments
myapp/prod/db-password   # Production only
myapp/dev/db-password    # Development only

Requirements

  • Python 3.11+
  • macOS (Keychain integration)
  • Bitwarden Secrets Manager account

Documentation

Full docs at vaultuner.alltuner.com.

License

MIT

Support the project

vaultuner is an open source project built by David Poblador i Garcia through All Tuner Labs.

If this project was useful to you, consider supporting its development.


Built by David Poblador i Garcia with the support of All Tuner Labs.
Made with ❤️ in Poblenou, Barcelona.

About

No description, website, or topics provided.

Resources

License

Code of conduct

Security policy

Stars

Watchers

Forks

Packages

 
 
 

Contributors

Languages