dotsecenv
dotsecenv/dotsecenvPlugin
Manage GPG-encrypted environment secrets from Claude Code - a secure alternative to plaintext .env files. Store, retrieve, share, and revoke secrets in `dotsecenv` vaults where values are encrypted at rest with AES-256-GCM and access-controlled per GPG identity. Interprets .secenv files (the encrypted counterpart to .env), resolves references, and automatically detects GPG pinentry compatibility.
Why this score
Popularity score: 52/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Nov 4, 2026 at commit 9381d5f4b7fb, first 300 source files (it's a large repo), with Cisco's open-source skill-scanner.
What its code does:
- Reads environment variables and sends network requests with them API clients do this to send your key to the service. Check which service it talks to.scripts/install.sh:115
- Runs shell commands Common for dev tools. Read the commands it runs.README.md:1, packages/README.md:2, plugin/README.md:1 and 40 more
- Includes scripts in hidden folders Folders starting with a dot are easy to miss when you read a repo..claude/skills/cli-reference-drift/check.sh:82
- Downloads content and runs it Whatever it downloads can change after we scanned it.scripts/install.sh:691
Web addresses in its code:
- dotsecenv.comcmd/dotsecenv/cmd_identity_create.go:45
- get.dotsecenv.comscripts/generate_release_key.sh:54
- api.github.comscripts/e2e-install.sh:35
- cdn.jsdelivr.netwebsite/src/pages/og/[...slug].ts:41
- x.comwebsite/astro.config.mjs:95
These are the sites named in the code, so it's where your data could go. It isn't a complete list: code can build addresses while it runs, and a few of these may be links rather than calls. Whatever you send also goes to the AI model you use.
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Nothing from another maker does quite the same job yet.