A lightweight CLI tool to sync CI/CD variables and secrets
between GitLab CI, Terraform Cloud, GitHub Actions, and .env files.
No server. No signup. Just install and run.
Compare variables between any two providers. See exactly what's in sync, missing, or different.
Sync variables from source to target. Use --dry-run to preview changes before applying.
Pull variables from target back to source. Keep your local .env in sync with remote providers.
Secret values are never printed. All output uses masked values. Scanned with bandit and pip-audit.
No server. No dashboard. No account. Just set env vars and run. Works in CI pipelines too.
MIT licensed. 100% test coverage. Contributions welcome. Built in the open from day one.
| PLATFORM | CATEGORY | READ | WRITE | STATUS |
|---|---|---|---|---|
| .env files | LOCAL | ✓ | ✓ | available |
| GitLab CI Variables | CI/CD | ✓ | ✓ | available |
| Terraform Cloud | IAC | ✓ | ✓ | available |
| GitHub Actions | CI/CD | ✓ | ⚠ | available |
| HashiCorp Vault | SECRET STORE | ✓ | ✓ | available |
| AWS Secrets Manager | SECRET STORE | ○ | ○ | coming soon |
| Azure Key Vault | SECRET STORE | ○ | ○ | coming soon |
| GCP Secret Manager | SECRET STORE | ○ | ○ | coming soon |
| Pulumi ESC | IAC | ○ | ○ | coming soon |
| Jenkins | CI/CD | ○ | ○ | coming soon |
| CircleCI | CI/CD | ○ | ○ | coming soon |
| Azure DevOps | CI/CD | ○ | ○ | coming soon |
| Kubernetes Secrets | CONTAINER | ○ | ○ | coming soon |
| Vercel | DEPLOY | ○ | ○ | coming soon |
| Fly.io | DEPLOY | ○ | ○ | coming soon |
| Railway | DEPLOY | ○ | ○ | coming soon |
Open source. Free forever. No strings attached.
VIEW ON GITHUB PYPI PACKAGE