A lightweight, zero-trust secrets management CLI and process injector built in Python.
- Bank-Grade Cryptography: Encrypted at rest using AES-256-GCM with key derivation via Argon2id.
- Zero-Trust Memory Injection: Injects environment secrets directly into child process RAM space (
os.environ) without writing unencrypted.envfiles to disk. - Global CLI: Subcommands for
create,set,get,list, andrun.
# Create encrypted vault
ciphervault create dev
# Store secret
ciphervault set dev API_KEY "sk-secret-12345"
# Run process with injected RAM secrets
ciphervault run dev -- python3 main.py