Changelog
What we've shipped, in order. Built in the open - every entry links back to the change where possible.
Social proof section
Added a credibility strip showing weekly npm installs and GitHub stars, so visitors can gauge traction at a glance.
Stricter landing-page CSP
Moved third-party scripts to a nonce-based script-src policy. Removes 'unsafe-inline' from the landing page.
Integrations section
Surfaced the tools Envshed plugs into: GitHub Actions, Docker, Vercel, Coolify, AWS runners, and the Node SDK.
Trust-signal bar
Dropped a compact strip under the hero CTAs highlighting AES-256-GCM encryption and the audit trail.
install.envshed.com installer
Spun up a dedicated CLI installer host so `curl | sh` flows have a stable, predictable origin.
Incident playbook and post-mortem template
Published the reliability playbook used when we respond to production incidents, plus the template for post-mortems.
Unshare secrets
Added a one-click unshare action and fixed the reveal toggle on shared secrets in the dashboard.
Docker and Coolify integration tutorials
Documented how to inject Envshed-managed secrets into Docker and Coolify deployments end-to-end.
CLI v0.14.0
Shipped org namespace refactor with `org list` and `org create` subcommands and bash/zsh/fish completions.
Webhook, member, and env-duplicate CLI commands
New `envshed webhook`, `envshed member`, `envshed env duplicate`, and `envshed token update-service` subcommands with shell completions and docs.
Service tokens for CI/CD
Machine-to-machine authentication with scoped read-only or read/write tokens, ready to drop into GitHub Actions or any CI runner.
SAML SSO on Business plan
Single sign-on via Okta, Azure AD, Google Workspace, or any SAML 2.0 IdP, available on the Business plan.
Older changes live in the git history. Check back every few weeks, we ship weekly.