Changelog
What we've shipped, in order. Built in the open — every entry links back to the change where possible.
Social proof section
Added a credibility strip showing weekly npm installs and GitHub stars, so visitors can gauge traction at a glance.
Stricter landing-page CSP
Moved third-party scripts to a nonce-based script-src policy. Removes 'unsafe-inline' from the landing page.
Integrations section
Surfaced the tools Envshed plugs into — GitHub Actions, Docker, Vercel, Coolify, AWS runners, and the Node SDK.
Trust-signal bar
Dropped a compact strip under the hero CTAs highlighting AES-256-GCM encryption, GDPR compliance, and the full audit trail.
install.envshed.com installer
Spun up a dedicated CLI installer host so `curl | sh` flows have a stable, predictable origin.
Incident playbook and post-mortem template
Published the reliability playbook used when we respond to production incidents, plus the template for post-mortems.
Unshare secrets
Added a one-click unshare action and fixed the reveal toggle on shared secrets in the dashboard.
Docker and Coolify integration tutorials
Documented how to inject Envshed-managed secrets into Docker and Coolify deployments end-to-end.
CLI v0.14.0
Shipped org namespace refactor with `org list` and `org create` subcommands and bash/zsh/fish completions.
Webhook, member, and env-duplicate CLI commands
New `envshed webhook`, `envshed member`, `envshed env duplicate`, and `envshed token update-service` subcommands with shell completions and docs.
Service tokens for CI/CD
Machine-to-machine authentication with scoped read-only or read/write tokens, ready to drop into GitHub Actions or any CI runner.
SAML SSO on Business plan
Single sign-on via Okta, Azure AD, Google Workspace, or any SAML 2.0 IdP — available on the Business plan.
Older changes live in the git history. Check back every few weeks — we ship weekly.