age encryption, no KMS
Encrypted with age, key in your local keyring. No hosted KMS, no vendor lock-in, no monthly bill to keep your secrets encrypted.
Secret Encryption Git Filter
Share the repo. Keep the secrets.
Dracon Warden encrypts marked files with age, smudge on checkout, clean on commit.
Why Dracon Warden
For teams that need to share .env files and credentials across a repo without leaking them to forks, CI logs, or accidental commits.
Smudge and clean, automatic
Write the cleartext in your working tree. Warden handles the smudge-on-checkout, clean-on-commit dance so the committed file is always ciphertext.
Shareable repos, private secrets
Push the repo to GitHub, GitLab, or Codeberg. Anyone can clone. Only the people with the age key can read the marked files.
Install Dracon Warden
Open-source. One git filter, one age keypair, no extra services.
View on GitHubMore from Dracon
Other products in the catalog
Tiles
Stop maintaining shell scripts that only you understand.
View product →SamAI
Automate browser tasks without writing brittle scripts.
View product →Folder Auto Banner
One command gives every directory instant context — git, TODOs, build, ports, Docker.
View product →Dracon Sync
Background auto-commit and multi-remote sync — invisible git safety net.
View product →Kiki
A sassy desktop announcer with local TTS and a personality your team will remember.
View product →Dracon System
Disk, process, guard, doctor — local-machine diagnostics for Dracon workspaces.
View product →