jdx/fnox

Health v2 · maintenance only

Adoption not part of the score

2098 stars · 102 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

fnox is a Rust CLI tool for managing secrets via encryption or cloud secret providers, storing them in a git-committed fnox.toml file. It supports providers like age, AWS KMS/Secrets Manager, Azure Key Vault, GCP Secret Manager, 1Password, Bitwarden, Infisical, and HashiCorp Vault, with shell integration to auto-load secrets as environment variables.

Use cases

• store encrypted secrets in git
• load secrets as environment variables when running commands
• automatically load secrets when cd-ing into a project directory
• manage different secrets for dev, staging, and production environments
• reference secrets stored in 1Password or Vault without committing them
• cache resolved secrets locally for offline access

When to choose

• you want secrets encrypted and committed to version control
• you need a unified CLI across multiple cloud secret providers
• you want automatic per-directory secret loading in your shell

When to avoid

• you need a full secrets server or centralized vault UI
• your team requires dynamic secret generation or rotation policies

Facets

cli-tool · maturity active

secrets-management security cli configuration-management security developer-tools self-hosted windows cli cross-platform secret-manager encryption age aws-kms vault toml-config shell-integration environment-variables devops command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="jdx/fnox")