cin

cin means config inject. It is a small CLI for encrypted app config in Git.

# create the shared encrypted config file
cin init vaishnav

# set encrypted environment options
cin set -e dev options.postgres.host postgres
cin set -e dev options.postgres.port 5432

# compose app env with encrypted templates
cin set -e dev -a api DATABASE_URL \
  'postgres://{{ .options.postgres.host }}:{{ .options.postgres.port }}/api'

# inject resolved values at runtime
cin run -e dev -a api -- pnpm dev

Install

HomebrewScoopwingetGoSourceRelease

HomebrewCopy

brew install --cask kado-so/tap/cin

ScoopCopy

scoop bucket add kado https://github.com/kado-so/scoop-bucket
scoop install kado/cin

wingetCopy

winget install Kado.Cin

GoCopy

go install github.com/kado-so/cin/cmd/cin@latest

SourceCopy

git clone https://github.com/kado-so/cin
cd cin
go test ./...
go build -o cin ./cmd/cin

ReleaseCopy

https://github.com/kado-so/cin/releases

Why it exists

• No backend service, daemon, hosted vault, or control plane.
• Secrets stay encrypted in configs.secret.yaml.
• Runtime commands receive resolved environment variables.
• Plaintext is never printed unless a command explicitly asks for it.
• CI/CD is modeled as a normal encrypted recipient.