varlock.dev @varlock.dev · 19/08/2026Just happy to see it in the wild! We're here to help if you need anything 000
varlock.dev @varlock.dev · 23/07/2026check out github.com/dmno-dev/fle... and github.com/dmno-dev/bumpygithub.comGitHub - dmno-dev/fledgling: 🐣 Create and set up new npm packages w/ trusted (OIDC) publishing - for one package or a whole monorepo🐣 Create and set up new npm packages w/ trusted (OIDC) publishing - for one package or a whole monorepo - dmno-dev/fledgling 010
Reposted by varlock.devTheo Ephraim @theozero.bsky.social · 21/07/2026Varlock now includes "credential brokering" functionality - your agent (or whatever process) gets only _placeholder_ credentials, and real secrets are swapped in over the wire (MITM proxy). Rules are configured in your existing .env.schema Would love to hear your feedback! 191
Reposted by varlock.devSal Rahman @manlycoffee.techhub.social.ap.brid.gy · 21/07/2026I was previously tending a booth for a product called Varlock. They're incredibly useful for credentials management. Definitely worth a look. They brand themselves as "credentials management in the AI era". github.com/dmno-dev/varlockgithub.comGitHub - dmno-dev/varlock: AI-safe .env files: Schemas for agents, Secrets for humans.AI-safe .env files: Schemas for agents, Secrets for humans. - dmno-dev/varlock 062
Reposted by varlock.devTheo Ephraim @theozero.bsky.social · 10/07/2026Super fun chatting with @brandonwhichard.com about varlock. He is a real user - found us through a listener and has been using it ever since. Have a listen! 🎧 031
Reposted by varlock.devBrandon Whichard @brandonwhichard.com · 10/07/2026The .env file: every project has one, almost nobody manages it well. This week I sat down with the founders of varlock to talk about fixing that. 052
varlock.dev @varlock.dev · 10/07/2026"Everyone has a place for Varlock in their tech stack." Thanks for the great conversation @softwaredefinedtalk.com www.softwaredefinedtalk.com/580softwaredefinedtalk.comVarlock: Bringing Order to the Chaos of Environment VariablesEvery project has environment variables. Almost nobody manages them well. This week Brandon talks with Phil Miller and Theo Ephraim, who built varlock to fix that — bringing structure and security to ... 040
Reposted by varlock.devTheo Ephraim @theozero.bsky.social · 07/07/2026🧙♂️ varlock@1.10 adds arbitrary codegen. As well as built-in support for php, python, go, rust - so you get a fully typed+coerced env loader to use in your code. Plugins can add codegen types - new possibilities to generate for k8s, terraform... anything! varlock.dev/guides/code-...varlock.devCode generationGenerate types and other code from your env schema, and extend it with plugins 161
Reposted by varlock.devTheo Ephraim @theozero.bsky.social · 18/06/2026Say hello to 🐣 fledgling - a new tool to create new npm packages and setup/sync trusted publishing (OIDC) settings. Works great for one offs, but even better in a monorepo! just `npx fledgling` 2177
Reposted by varlock.devTheo Ephraim @theozero.bsky.social · 17/06/2026New varlock+mise guide varlock.dev/integrations... Would appreciate a look from any heavy mise users!varlock.devmiseInstall varlock with mise and wire validated env vars into your tasks 062
Reposted by varlock.devDarcy Clarke @darcyclarke.me · 01/06/2026⚡️ We're looking for a DevRel person at @vlt.sh - based in our Toronto 🇨🇦 HQ. You'll work closely w/ me & should love the idea of owning various aspects of product marketing. You'll be vlt's biggest fan & advocate; molding this unique role in a way that plays to your strengths & ours. 22417
Reposted by varlock.devRuy Adorno @ruyadorno.com · 01/06/2026Toronto friends! we're looking for a DevRel to join the @vlt.sh team there! #hiring #toronto www.vlt.io/careers/deve...vlt.ioDeveloper Relations Engineer | Careers | vlt /vōlt/As a Developer Relations Engineer, you will serve as the bridge between vlt and the global JavaScript community. This role combines technical expertise, community engagement, and developer-focused mar... 1104
varlock.dev @varlock.dev · 21/05/2026Really happy to hear that! If there's anything else you'd like to see to complete that docker/CI story, just let us know! 030
varlock.dev @varlock.dev · 21/05/2026Check out our friends at minimal.dev toominimal.devDeclarative. Isolated. Reproducible.Lightning fast, local first sandboxes that secure the supply chain across devs, agents, and CI. 140
Reposted by varlock.devTheo Ephraim @theozero.bsky.social · 20/05/2026This is an awesome writeup! Another helpful precaution I've been yelling about: get EVERY secret out of plaintext. Many malicious scripts are harvesting creds from .env and other config files. varlock.dev can helpvarlock.devVarlock - AI-safe .env filesAI-safe .env files: schemas for agents, secrets for humans. Validate, secure, and share environment variables with type-safety, leak prevention, and integrations for Next.js, Vite, Astro, and more. 022
varlock.dev @varlock.dev · 08/05/2026Thanks for the shout out @softwaredefinedtalk.com www.softwaredefinedtalk.com/571 (~47:00)softwaredefinedtalk.comThe Enterprise Dunbar numberThis week, we discuss AI labs driving cloud revenue, hyperscalers laying off instead of building, and kids defeating age verification. Plus, Brandon has too many thoughts on Workday. 000
Reposted by varlock.devTheo Ephraim @theozero.bsky.social · 06/05/2026As of today @varlock.dev has OIDC workload identity support - this means that for some popular combos of deployment platform + secret storage, you no longer need a secret-zero to pull the rest of your sensitive data. check out varlock.dev/guides/oidc/ to get startedvarlock.devOIDC Workload IdentityAuthenticate with secret providers using OIDC tokens from your deployment platform — no long-lived credentials needed 081
Reposted by varlock.devTheo Ephraim @theozero.bsky.social · 28/04/2026Introducing bumpy 🐸 - a new version/release/changelog tool (carefully crafted slop fork of changesets 🦋) Fixes 100s of open issues, much simpler, more flexible. We use it to release @varlock.dev and 25+ linked plugins/libs. bumpy.varlock.dev 4254
varlock.dev @varlock.dev · 28/04/2026DMNO (varlock) was one of the fastest growing open-source orgs on GitHub in Q1. Thanks for the recognition @supabase.com >commitvc #osscarindex osscar.dev/org/dmno-devosscar.devDMNO — OSSCAR Q1 2026DMNO on OSSCAR Q1 2026 with a composite score of 3.000. 092
varlock.dev @varlock.dev · 21/04/2026A great varlock overview using @1password.bsky.social and @svelte.dev deployed on @vercel.com by @thitemple.me www.youtube.com/watch?v=7n3i...youtube.comI Deployed to Vercel and Only Set One Secret — varlock Did the RestYouTube video by Thiago Temple 060
varlock.dev @varlock.dev · 20/04/2026Give varlock.dev a try and you can get the best of both worlds with some extra DX goodies on topvarlock.devVarlock - AI-safe .env filesAI-safe .env files: schemas for agents, secrets for humans. Validate, secure, and share environment variables with type-safety, leak prevention, and integrations for Next.js, Vite, Astro, and more. 010
Reposted by varlock.devTheo Ephraim @theozero.bsky.social · 17/04/2026To celebrate @cloudflare.social's epic week - the new @varlock.dev workers integration got a revamp and it is RAD. We totally fixed env vars in workers. varlock.dev/integrations... Full validation, pull from anywhere, set env atomically w/ each deploy. No more mix of .dev.vars/.env/wrangler.tomlvarlock.devCloudflare WorkersHow to integrate varlock with Cloudflare Workers and Wrangler for secure, type-safe environment management 031
Reposted by varlock.devDigital Brain @yourdigitalbrain.bsky.social · 07/04/2026Unlock the potential of your AI projects with dmno-dev/varlock. Secure your .env files with schemas designed for agents and secrets meant for humans. sinapti.ca/post/en/varlock-typed-sc…sinapti.caVarlock: typed schema environment variables to protect secrets in AI projects, over 3,000 stars on GitHub - SinapticaIf you use AI agents for programming, you already know the risk: the assistant reads your work environment and, with it, your secrets. Varlock elegantly solves 021
varlock.dev @varlock.dev · 01/04/2026March recap — featuring @nextjs.org (full Turbopack), @cloudflare.social Workers, @expo.dev & plugins for @dashlane.com @hashicorp.com @proton.me me @passbolt.bsky.social (+ KeePass & unix pass): varlock.dev/blog/march-2...varlock.devMarch 2026 Recapvarlock@0.7.0 adds better plugin authoring with ESM/TypeScript single-file plugins, the Next.js integration gains full Turbopack support, we launch Cloudflare and Expo integrations, and the community ... 020
varlock.dev @varlock.dev · 19/03/2026Love to see it! Evert from @vlt giving a shout out at TorontoJS 030
varlock.dev @varlock.dev · 16/03/2026Stoked to be featured in @nickyt.online 's awesome One Tip a Week newsletter which is quickly becoming one of our favourites. one-tip-a-week.beehiiv.com/p/one-tip-a-...one-tip-a-week.beehiiv.comOne Tip a Week: Stop Shipping Broken Env Config 021
Reposted by varlock.devGitHub Trending JS/TS @github-trending-js.bsky.social · 13/03/2026🚀 Skyrocketing! 🚀 (200+ new stars) 📦 dmno-dev / varlock ⭐ 2,270 (+357) 🗒 TypeScript .env files built for sharing powered by @env-spec decorator commentsgithub.comGitHub - dmno-dev/varlock: .env files built for sharing powered by @env-spec decorator comments.env files built for sharing powered by @env-spec decorator comments - dmno-dev/varlock 142
varlock.dev @varlock.dev · 12/03/2026We appreciate the post and the feedback @jesse.id ! Those getting started docs are due for an update :) jesse.id/blog/posts/u... 142
Reposted by varlock.devDavid De Sloovere @endevr.be · 11/03/2026Listened to the pod, but visiting varlock.dev made it so much better... The artwork is awesome! Will try varlock tomorrow! Also starred the repo 🌟varlock.devvarlock 141
Reposted by varlock.devM̴̛̫̀ã̴̩̙̲͖̖l̴͓̪̮̈́̎p̸͔̘̹̲̘͇͒̽̌̓͗͠e̵̮̙̜̜̝͑̐̕ͅȑ̷͙̰͙̞̐͜͝͠͝c̶̢̱̹̻̚͜í̶̡̝̀̅̽̏ŏ̴̩͓̈̀̂ @malpercio.dev · 11/03/2026gonna start using varlock.dev just because this site is coolvarlock.devvarlock 172
Reposted by varlock.devTheo Ephraim @theozero.bsky.social · 09/03/2026varlock was featured on our favourite webdev podcast @syntax.fm today :) Check it out! www.youtube.com/watch?v=M5Ik...youtube.comStop putting secrets in .envYouTube video by Syntax 4203
Reposted by varlock.devGitHub @github.com · 17/02/2026Who knows how to secure open source better than the maintainers themselves? 🛡️ 4277
varlock.dev @varlock.dev · 17/02/2026read more about the session here: github.blog/open-source/...github.blogSecuring the AI software supply chain: Security results across 67 open source projectsThe GitHub Secure Open Source Fund helped 67 critical AI‑stack projects accelerate fixes, strengthen ecosystems, and advance open source resilience. 000
varlock.dev @varlock.dev · 17/02/2026Varlock was one of the projects selected for the @github.com Secure Open Source Fund! We worked with security experts to level up our fundamentals like threat modeling, responsible disclosure, automated scanning, and more. Here's what we learned and shipped: varlock.dev/blog/github-...varlock.devHow Varlock Is Leveling Up Security Through the GitHub Secure Open Source Fund 252
varlock.dev @varlock.dev · 12/02/2026If you want a bit more flexibility, validation and some additional security guardrails, check out varlock.dev. 1Pass was our first plugin :) 000
varlock.dev @varlock.dev · 11/02/2026if you want a better way to deal with those pesky .env files, check out varlock.dev, we're shipping some more plugins this week for the different secrets management providers too! 000
varlock.dev @varlock.dev · 06/02/2026What if you could have your cake and eat it too? Load and validate that .env with varlock.dev and then migrate to @1password.bsky.social incrementally. You can even load local overrides via their local .env file destination 000
varlock.dev @varlock.dev · 10/12/2025Really great chatting with @thisdotlabs.bsky.social @robocel.bsky.social about all things varlock.dev 011
varlock.dev @varlock.dev · 02/12/2025we have some nice examples on how to securely load secrets to use with opencode here varlock.dev/guides/ai-to...varlock.devAI ToolsUsing varlock with AI tools - preventing secrets from being leaked to your AI agents 110
varlock.dev @varlock.dev · 21/10/2025And you can use varlock.dev to validate them too!varlock.devvarlock 000