varn-cli

Source of @varnsecurity/cli, the command-line tool for Värn's vault: it resolves varn:// secret references on the machine that needs them, so secrets stay out of code, .env files and CI settings. Secrets are decrypted on that machine; Värn never sees them in plaintext.

Usage, commands and the GitHub Action: packages/cli/README.md. Customer guide: Hemligheter i kod och CI · Secrets in code and CI.

This repository is a read-only mirror, published automatically from Värn's main repository so that every npm release can be traced to its source (npm provenance). It contains the CLI and the vault crypto it bundles (src/domain/vault/), the same code the Värn web app runs in the browser.

npm ci
npm test            # CLI tests, including end-to-end decryption against generated fixtures
npm run build:cli   # packages/cli/dist/varn.mjs, deterministic and unminified

Security issues: security@varnsecurity.se. Licence: MIT.