Sign in

varlock.dev

@varlock.dev
107 followers 352 following 65 posts

Building the future of configuration for humans and non-humans varlock.dev

PostsRepliesMedia
Reposted by varlock.dev
Theo Ephraim @theozero.bsky.social · 21/07/2026
Varlock now includes "credential brokering" functionality - your agent (or whatever process) gets only _placeholder_ credentials, and real secrets are swapped in over the wire (MITM proxy). Rules are configured in your existing .env.schema Would love to hear your feedback!
191
Reposted by varlock.dev
Sal Rahman @manlycoffee.techhub.social.ap.brid.gy · 21/07/2026
I was previously tending a booth for a product called Varlock. They're incredibly useful for credentials management. Definitely worth a look. They brand themselves as "credentials management in the AI era". github.com/dmno-dev/varlock
github.com
GitHub - dmno-dev/varlock: AI-safe .env files: Schemas for agents, Secrets for humans.
AI-safe .env files: Schemas for agents, Secrets for humans. - dmno-dev/varlock
062
Reposted by varlock.dev
Theo Ephraim @theozero.bsky.social · 10/07/2026
Super fun chatting with @brandonwhichard.com about varlock. He is a real user - found us through a listener and has been using it ever since. Have a listen! 🎧
031
Reposted by varlock.dev
Brandon Whichard @brandonwhichard.com · 10/07/2026
The .env file: every project has one, almost nobody manages it well. This week I sat down with the founders of varlock to talk about fixing that.
052
varlock.dev @varlock.dev · 10/07/2026
"Everyone has a place for Varlock in their tech stack." Thanks for the great conversation @softwaredefinedtalk.com www.softwaredefinedtalk.com/580
softwaredefinedtalk.com
Varlock: Bringing Order to the Chaos of Environment Variables
Every project has environment variables. Almost nobody manages them well. This week Brandon talks with Phil Miller and Theo Ephraim, who built varlock to fix that — bringing structure and security to ...
040
Reposted by varlock.dev
Theo Ephraim @theozero.bsky.social · 07/07/2026
🧙‍♂️ varlock@1.10 adds arbitrary codegen. As well as built-in support for php, python, go, rust - so you get a fully typed+coerced env loader to use in your code. Plugins can add codegen types - new possibilities to generate for k8s, terraform... anything! varlock.dev/guides/code-...
varlock.dev
Code generation
Generate types and other code from your env schema, and extend it with plugins
161
Reposted by varlock.dev
Theo Ephraim @theozero.bsky.social · 18/06/2026
Say hello to 🐣 fledgling - a new tool to create new npm packages and setup/sync trusted publishing (OIDC) settings. Works great for one offs, but even better in a monorepo! just `npx fledgling`
2167
Reposted by varlock.dev
Theo Ephraim @theozero.bsky.social · 17/06/2026
New varlock+mise guide varlock.dev/integrations... Would appreciate a look from any heavy mise users!
varlock.dev
mise
Install varlock with mise and wire validated env vars into your tasks
062
Reposted by varlock.dev
Darcy Clarke @darcyclarke.me · 01/06/2026
⚡️ We're looking for a DevRel person at @vlt.sh - based in our Toronto 🇨🇦 HQ. You'll work closely w/ me & should love the idea of owning various aspects of product marketing. You'll be vlt's biggest fan & advocate; molding this unique role in a way that plays to your strengths & ours.
22417
Reposted by varlock.dev
Ruy Adorno @ruyadorno.com · 01/06/2026
Toronto friends! we're looking for a DevRel to join the @vlt.sh team there! #hiring #toronto www.vlt.io/careers/deve...
vlt.io
Developer Relations Engineer | Careers | vlt /vōlt/
As a Developer Relations Engineer, you will serve as the bridge between vlt and the global JavaScript community. This role combines technical expertise, community engagement, and developer-focused mar...
1104
Reposted by varlock.dev
Theo Ephraim @theozero.bsky.social · 20/05/2026
This is an awesome writeup! Another helpful precaution I've been yelling about: get EVERY secret out of plaintext. Many malicious scripts are harvesting creds from .env and other config files. varlock.dev can help
varlock.dev
Varlock - AI-safe .env files
AI-safe .env files: schemas for agents, secrets for humans. Validate, secure, and share environment variables with type-safety, leak prevention, and integrations for Next.js, Vite, Astro, and more.
022
varlock.dev @varlock.dev · 08/05/2026
Thanks for the shout out @softwaredefinedtalk.com www.softwaredefinedtalk.com/571 (~47:00)
softwaredefinedtalk.com
The Enterprise Dunbar number
This week, we discuss AI labs driving cloud revenue, hyperscalers laying off instead of building, and kids defeating age verification. Plus, Brandon has too many thoughts on Workday.
000
Reposted by varlock.dev
Theo Ephraim @theozero.bsky.social · 06/05/2026
As of today @varlock.dev has OIDC workload identity support - this means that for some popular combos of deployment platform + secret storage, you no longer need a secret-zero to pull the rest of your sensitive data. check out varlock.dev/guides/oidc/ to get started
varlock.dev
OIDC Workload Identity
Authenticate with secret providers using OIDC tokens from your deployment platform — no long-lived credentials needed
081
Reposted by varlock.dev
Theo Ephraim @theozero.bsky.social · 28/04/2026
Introducing bumpy 🐸 - a new version/release/changelog tool (carefully crafted slop fork of changesets 🦋) Fixes 100s of open issues, much simpler, more flexible. We use it to release @varlock.dev and 25+ linked plugins/libs. bumpy.varlock.dev
4254
varlock.dev @varlock.dev · 28/04/2026
DMNO (varlock) was one of the fastest growing open-source orgs on GitHub in Q1. Thanks for the recognition @supabase.com >commitvc #osscarindex osscar.dev/org/dmno-dev
osscar.dev
DMNO — OSSCAR Q1 2026
DMNO on OSSCAR Q1 2026 with a composite score of 3.000.
092
varlock.dev @varlock.dev · 21/04/2026
A great varlock overview using @1password.bsky.social and @svelte.dev deployed on @vercel.com by @thitemple.me www.youtube.com/watch?v=7n3i...
youtube.com
I Deployed to Vercel and Only Set One Secret — varlock Did the Rest
YouTube video by Thiago Temple
060
Reposted by varlock.dev
Theo Ephraim @theozero.bsky.social · 17/04/2026
To celebrate @cloudflare.social's epic week - the new @varlock.dev workers integration got a revamp and it is RAD. We totally fixed env vars in workers. varlock.dev/integrations... Full validation, pull from anywhere, set env atomically w/ each deploy. No more mix of .dev.vars/.env/wrangler.toml
varlock.dev
Cloudflare Workers
How to integrate varlock with Cloudflare Workers and Wrangler for secure, type-safe environment management
031
Reposted by varlock.dev
Digital Brain @yourdigitalbrain.bsky.social · 07/04/2026
Unlock the potential of your AI projects with dmno-dev/varlock. Secure your .env files with schemas designed for agents and secrets meant for humans. sinapti.ca/post/en/varlock-typed-sc…
sinapti.ca
Varlock: typed schema environment variables to protect secrets in AI projects, over 3,000 stars on GitHub - Sinaptica
If you use AI agents for programming, you already know the risk: the assistant reads your work environment and, with it, your secrets. Varlock elegantly solves
021
varlock.dev @varlock.dev · 01/04/2026
March recap — featuring @nextjs.org (full Turbopack), @cloudflare.social Workers, @expo.dev & plugins for @dashlane.com @hashicorp.com @proton.me me @passbolt.bsky.social (+ KeePass & unix pass): varlock.dev/blog/march-2...
varlock.dev
March 2026 Recap
varlock@0.7.0 adds better plugin authoring with ESM/TypeScript single-file plugins, the Next.js integration gains full Turbopack support, we launch Cloudflare and Expo integrations, and the community ...
020
varlock.dev @varlock.dev · 19/03/2026
Love to see it! Evert from @vlt giving a shout out at TorontoJS
030
varlock.dev @varlock.dev · 16/03/2026
Stoked to be featured in @nickyt.online 's awesome One Tip a Week newsletter which is quickly becoming one of our favourites. one-tip-a-week.beehiiv.com/p/one-tip-a-...
one-tip-a-week.beehiiv.com
One Tip a Week: Stop Shipping Broken Env Config
021
Reposted by varlock.dev
GitHub Trending JS/TS @github-trending-js.bsky.social · 13/03/2026
🚀 Skyrocketing! 🚀 (200+ new stars) 📦 dmno-dev / varlock ⭐ 2,270 (+357) 🗒 TypeScript .env files built for sharing powered by @env-spec decorator comments
github.com
GitHub - dmno-dev/varlock: .env files built for sharing powered by @env-spec decorator comments
.env files built for sharing powered by @env-spec decorator comments - dmno-dev/varlock
142
varlock.dev @varlock.dev · 12/03/2026
We appreciate the post and the feedback @jesse.id ! Those getting started docs are due for an update :) jesse.id/blog/posts/u...
142
Reposted by varlock.dev
David De Sloovere @endevr.be · 11/03/2026
Listened to the pod, but visiting varlock.dev made it so much better... The artwork is awesome! Will try varlock tomorrow! Also starred the repo 🌟
varlock.dev
varlock
141
Reposted by varlock.dev
M̴̛̫̀ã̴̩̙̲͖̖l̴͓̪̮̈́̎p̸͔̘̹̲̘͇͒̽̌̓͗͠e̵̮̙̜̜̝͑̐̕ͅȑ̷͙̰͙̞̐͜͝͠͝c̶̢̱̹̻̚͜í̶̡̝̀̅̽̏ŏ̴̩͓̈̀̂ @malpercio.dev · 11/03/2026
gonna start using varlock.dev just because this site is cool
varlock.dev
varlock
172
varlock.dev @varlock.dev · 09/03/2026
😀
030
varlock.dev @varlock.dev · 09/03/2026
🙌
041
Reposted by varlock.dev
Theo Ephraim @theozero.bsky.social · 09/03/2026
varlock was featured on our favourite webdev podcast @syntax.fm today :) Check it out! www.youtube.com/watch?v=M5Ik...
youtube.com
Stop putting secrets in .env
YouTube video by Syntax
4203
Reposted by varlock.dev
GitHub @github.com · 17/02/2026
Who knows how to secure open source better than the maintainers themselves? 🛡️
4277
varlock.dev @varlock.dev · 17/02/2026
Varlock was one of the projects selected for the @github.com Secure Open Source Fund! We worked with security experts to level up our fundamentals like threat modeling, responsible disclosure, automated scanning, and more. Here's what we learned and shipped: varlock.dev/blog/github-...
varlock.dev
How Varlock Is Leveling Up Security Through the GitHub Secure Open Source Fund
252
varlock.dev @varlock.dev · 10/12/2025
Really great chatting with @thisdotlabs.bsky.social @robocel.bsky.social about all things varlock.dev
011
Reposted by varlock.dev
Ben Vinegar @benv.ca · 09/10/2025
🇨🇦 Devtools Toronto is returning Tues, Nov 4th at BDC Community Square. Featuring hands-on demos from 1Password, Tempo, Keyflow, Wispbit, and Varlock (DMNO) 👇 RSVP link below
192
varlock.dev @varlock.dev · 30/09/2025
Just tested and it works with varlock.dev!
153
varlock.dev @varlock.dev · 30/09/2025
Great to meet you and can't wait to try your game!
000
Reposted by varlock.dev
React Advanced London @reactadvanced.gitnation.org · 11/09/2025
Meet our speakers for the upcoming #ReactTorontoMeetup 🎉 @techsev.bsky.social — How I Ignored Reddit and Made a Steam Game Using React Sergiy Dybskiy — Make Agents Talk to You @dmno.bsky.social — Secure Secrets in Next.js for Human and Non-Human Developers 🔗 Register: guild.host/events/react...
122
Reposted by varlock.dev
Nick Taylor @nickyt.online · 01/09/2025
A critical feature launch turns sour when key analytics go missing! Discover the common pitfalls in deployment, from overlooked post-production keys to staging vs. prod discrepancies. 🙈 Varlock from @dmno.bsky.social to the rescue! #cicd #environmentvariables #typesafety
131
Reposted by varlock.dev
Nick Taylor @nickyt.online · 21/08/2025
Here's the PR with what we did on the live stream. Thanks again for hanging Theo Ephraim and Phil Miller! github.com/nickytonline...
github.com
chore: add environment configuration and integrate varlock by nickytonline · Pull Request #22 · nickytonline/nickyt.live
This pull request introduces environment variable management using the Varlock library and its Astro integration. It standardizes how environment variables are accessed throughout the codebase, imp...
141
Reposted by varlock.dev
Nick Taylor @nickyt.online · 21/08/2025
Looking forward to hanging with the @dmno.bsky.social crew again tomorrow! Come hang as we dig into Varlock with @astro.build! www.youtube.com/watch?v=AG9r...
youtube.com
Levelling up Astro env with Varlock
YouTube video by Nick Taylor
042
Reposted by varlock.dev
Theo Ephraim @theozero.bsky.social · 28/07/2025
New varlock vite integration is now live. More vite-based framework integrations coming shortly, and works already with qwik! Your env vars deserve a little more magic in their lives 🧙‍♂️✨ varlock.dev/integrations...
varlock.dev
Vite
How to integrate varlock with Vite for secure, type-safe environment management
073
varlock.dev @varlock.dev · 24/07/2025
Live stream today with @nickyt.online @ 1:30pm EST, talking all things varlock and DMNO. nickyt.live#2025-07-24-p...
nickyt.live
Nick Taylor's live streaming schedule
Links to Nick Taylor's live streaming channels and content
011
varlock.dev @varlock.dev · 18/07/2025
🧙‍♂️👀
010
varlock.dev @varlock.dev · 17/07/2025
Happy to be featured in today's @console.dev. More integrations coming soon!
Varlock
Enhanced .env files.

What we like
Use decorator comments to create .env config schemas. Allows for validation and type safety. Implement function calls e.g. to load a secret from 1Password. Redacts values in stdout and console methods. Supports different environments. Drop-in replacement for dotenv.

What we don't like
Only has native integrations for Node and Next.js (doesn’t support Turbopack yet), but there is a binary CLI to run and inject values into the environment.
000
Reposted by varlock.dev
Josh W. Comeau @joshwcomeau.com · 16/07/2025
🔥 My friends at DMNO have a new devtool: varlock. It’s a drop-in replacement for dotenv, and adds a bunch of cool stuff like validation and type safety. It stores the secrets themselves in password managers or encrypted vaults. The landing page also has a very cool RPG vibe 😄 varlock.dev
5819
varlock.dev @varlock.dev · 16/07/2025
We recently launched varlock.dev. Similar to DMNO but built on top of the .env files you're already using. The early feedback has been really positive. Check it out, ⭐ star us on GitHub and let us know what you think!
varlock.dev
varlock
122
Reposted by varlock.dev
Theo Ephraim @theozero.bsky.social · 10/04/2025
Over at @dmno.bsky.social, we use our @1password.bsky.social plugin every day - keeping our secrets synced, validated, and secured behind biometric unlock - away from prying AIs 🚫🤖 Incredibly proud to share we are the first feature on their new developer blog ❤️
1password.community
Developer spotlight: How DMNO is building on 1Password
DMNO is a configuration toolkit for development and deployment workflows. Learn how the DMNO team leveraged 1Password CLI and SDKs to build a plugin that...
021
varlock.dev @varlock.dev · 12/02/2025
Appreciate the shoutout from @wesbos.com on the latest @syntax.fm about an old Web MIDI project of Phil's! open.spotify.com/episode/3kJ1...
open.spotify.com
876: MIDI & Music in the Browser
Syntax - Tasty Web Development Treats · Episode
0192
varlock.dev @varlock.dev · 02/01/2025
Thanks @joshwcomeau.com, we're honoured to be included!!
010
varlock.dev @varlock.dev · 27/11/2024
Anyone running their own PDS? If so how are you managing it?
110
varlock.dev @varlock.dev · 20/11/2024
Really nice to see this in this year's State of DevOps. If you make devtools, external or internal, then your product is docs.
"Culture of documentation" 

The Agile manifesto advocates for
“working software over comprehensive
documentation”. We continue to find,
however, that quality documentation is a
key component of working software. 

From the 2024 State of DevOps report
000