Shopify/ejson

Health v2 · maintenance only

Adoption not part of the score

1480 stars · 72 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

EJSON is a Go CLI utility for managing encrypted secrets in JSON files using asymmetric elliptic-curve (NaCl Box) encryption. It lets teams commit secrets to source control safely, with public keys embedded in the file and private keys stored locally on decrypting machines.

Use cases

• store encrypted secrets in a git repository
• encrypt config values with public key cryptography
• manage secrets for production servers without a secrets service
• audit secret changes with git blame
• distribute decryption keys to servers via configuration management
• generate keypairs for encrypting credentials

When to choose

• you want secrets versioned alongside application code in git
• you need line-by-line auditability of secret changes
• you prefer simple file-based secrets over a hosted secrets manager
• you want decryption locked down to specific servers via local keydir

When to avoid

• you need dynamic secrets, leasing, or rotation like Vault provides
• you require centralized access control and multi-team secret sharing
• your secrets are not expressible as JSON string values

Facets

cli-tool · maturity stable

cryptography security secrets-management cli security developer-tools cli go encrypted-secrets public-key-cryptography nacl git-friendly secrets-in-source-control devops command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Shopify/ejson")