+ 
-
+
@@ -39,28 +39,31 @@
**Read this in other languages**: [
](i18n/README.en.md)
[
](i18n/README.es.md)
+[
](i18n/README.de.md)
[
](i18n/README.ko.md)
[
](i18n/README.tr.md)
+[
](i18n/README.id.md)
+[
](i18n/README.pt-br.md)
-**[Infisical](https://infisical.com)** is an open source, end-to-end encrypted secret manager which you can use to centralize your API keys and configs. From Infisical, you can then distribute these secrets across your whole developemnt lifecycle - from development to production . It's designed to be simple and take minutes to get going.
+**[Infisical](https://infisical.com)** is an open source, end-to-end encrypted secret manager which you can use to centralize your API keys and configs. From Infisical, you can then distribute these secrets across your whole development lifecycle - from development to production . It's designed to be simple and take minutes to get going.
-- **[User-Friendly Dashboard](https://infisical.com/docs/getting-started/dashboard/project)** to manage your team's secrets and configs within projects
-- **[Language-Agnostic CLI](https://infisical.com/docs/cli/overview)** that pulls and injects esecrets and configs into your local workflow
-- **[Complete control over your data](https://infisical.com/docs/self-hosting/overview)** - host it yourself on any infrastructure
-- **Navigate Multiple Environments** per project (e.g. development, staging, production, etc.)
-- **Personal overrides** for secrets and configs
-- **[Integrations](https://infisical.com/docs/integrations/overview)** with CI/CD and production infrastructure
-- **[Infisical API](https://infisical.com/docs/api-reference/overview/introduction)** - manage secrets via HTTPS requests to the platform
-- **[Secret Versioning](https://infisical.com/docs/getting-started/dashboard/versioning)** to view the change history for any secret
-- **[Activity Logs](https://infisical.com/docs/getting-started/dashboard/audit-logs)** to record every action taken in a project
-- **[Point-in-time Secrets Recovery](https://infisical.com/docs/getting-started/dashboard/pit-recovery)** for rolling back to any snapshot of your secrets
-- **Role-based Access Controls** per environment
-- **2FA** (more options coming soon)
-- 🔜 **1-Click Deploy** to AWS
-- 🔜 **Automatic Secret Rotation**
-- 🔜 **Smart Security Alerts**
-- 🔜 **Secrets Rotation**
-- 🔜 **Slack & MS Teams** integrations
+- **[User-Friendly Dashboard](https://infisical.com/docs/getting-started/dashboard/project)** to manage your team's secrets and configs within projects
+- **[Language-Agnostic CLI](https://infisical.com/docs/cli/overview)** that pulls and injects esecrets and configs into your local workflow
+- **[Complete control over your data](https://infisical.com/docs/self-hosting/overview)** - host it yourself on any infrastructure
+- **Navigate Multiple Environments** per project (e.g. development, staging, production, etc.)
+- **Personal overrides** for secrets and configs
+- **[Integrations](https://infisical.com/docs/integrations/overview)** with CI/CD and production infrastructure
+- **[Infisical API](https://infisical.com/docs/api-reference/overview/introduction)** - manage secrets via HTTPS requests to the platform
+- **[Secret Versioning](https://infisical.com/docs/getting-started/dashboard/versioning)** to view the change history for any secret
+- **[Activity Logs](https://infisical.com/docs/getting-started/dashboard/audit-logs)** to record every action taken in a project
+- **[Point-in-time Secrets Recovery](https://infisical.com/docs/getting-started/dashboard/pit-recovery)** for rolling back to any snapshot of your secrets
+- **Role-based Access Controls** per environment
+- **2FA** (more options coming soon)
+- 🔜 **1-Click Deploy** to AWS
+- 🔜 **Automatic Secret Rotation**
+- 🔜 **Smart Security Alerts**
+- 🔜 **Secrets Rotation**
+- 🔜 **Slack & MS Teams** integrations
And more.
@@ -92,7 +95,7 @@ We're currently setting the foundation and building [integrations](https://infis
| - ✔️ GitLab CI/CD + ✔️ GitLab CI/CD | @@ -315,19 +318,19 @@ We're currently setting the foundation and building [integrations](https://infis |
+ 
## 🌎 Translations
diff --git a/backend/package-lock.json b/backend/package-lock.json
index 6514ebb17..3741f7665 100644
--- a/backend/package-lock.json
+++ b/backend/package-lock.json
@@ -19,6 +19,7 @@
"await-to-js": "^3.0.0",
"aws-sdk": "^2.1311.0",
"axios": "^1.1.3",
+ "axios-retry": "^3.4.0",
"bcrypt": "^5.1.0",
"bigint-conversion": "^2.2.2",
"builder-pattern": "^2.2.0",
@@ -3473,6 +3474,17 @@
"@babel/core": "^7.0.0-0"
}
},
+ "node_modules/@babel/runtime": {
+ "version": "7.21.0",
+ "resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.21.0.tgz",
+ "integrity": "sha512-xwII0//EObnq89Ji5AKYQaRYiW/nZ3llSv29d49IuxPhKbtJoLP+9QUUZ4nVragQVtaVGeZrpB+ZtG/Pdy/POw==",
+ "dependencies": {
+ "regenerator-runtime": "^0.13.11"
+ },
+ "engines": {
+ "node": ">=6.9.0"
+ }
+ },
"node_modules/@babel/template": {
"version": "7.18.10",
"resolved": "https://registry.npmjs.org/@babel/template/-/template-7.18.10.tgz",
@@ -5317,6 +5329,15 @@
"proxy-from-env": "^1.1.0"
}
},
+ "node_modules/axios-retry": {
+ "version": "3.4.0",
+ "resolved": "https://registry.npmjs.org/axios-retry/-/axios-retry-3.4.0.tgz",
+ "integrity": "sha512-VdgaP+gHH4iQYCCNUWF2pcqeciVOdGrBBAYUfTY+wPcO5Ltvp/37MLFNCmJKo7Gj3SHvCSdL8ouI1qLYJN3liA==",
+ "dependencies": {
+ "@babel/runtime": "^7.15.4",
+ "is-retry-allowed": "^2.2.0"
+ }
+ },
"node_modules/babel-jest": {
"version": "29.3.1",
"resolved": "https://registry.npmjs.org/babel-jest/-/babel-jest-29.3.1.tgz",
@@ -7604,6 +7625,17 @@
"node": ">=0.10.0"
}
},
+ "node_modules/is-retry-allowed": {
+ "version": "2.2.0",
+ "resolved": "https://registry.npmjs.org/is-retry-allowed/-/is-retry-allowed-2.2.0.tgz",
+ "integrity": "sha512-XVm7LOeLpTW4jV19QSH38vkswxoLud8sQ57YwJVTPWdiaI9I8keEhGFpBlslyVsgdQy4Opg8QOLb8YRgsyZiQg==",
+ "engines": {
+ "node": ">=10"
+ },
+ "funding": {
+ "url": "https://github.com/sponsors/sindresorhus"
+ }
+ },
"node_modules/is-stream": {
"version": "2.0.1",
"resolved": "https://registry.npmjs.org/is-stream/-/is-stream-2.0.1.tgz",
@@ -12179,6 +12211,11 @@
"node": ">=8.10.0"
}
},
+ "node_modules/regenerator-runtime": {
+ "version": "0.13.11",
+ "resolved": "https://registry.npmjs.org/regenerator-runtime/-/regenerator-runtime-0.13.11.tgz",
+ "integrity": "sha512-kY1AZVr2Ra+t+piVaJ4gxaFaReZVH40AKNo7UCX6W+dEwBo/2oZJzqfuN1qLq1oL45o56cPaTXELwrTh8Fpggg=="
+ },
"node_modules/regexpp": {
"version": "3.2.0",
"resolved": "https://registry.npmjs.org/regexpp/-/regexpp-3.2.0.tgz",
@@ -16584,6 +16621,14 @@
"@babel/helper-plugin-utils": "^7.19.0"
}
},
+ "@babel/runtime": {
+ "version": "7.21.0",
+ "resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.21.0.tgz",
+ "integrity": "sha512-xwII0//EObnq89Ji5AKYQaRYiW/nZ3llSv29d49IuxPhKbtJoLP+9QUUZ4nVragQVtaVGeZrpB+ZtG/Pdy/POw==",
+ "requires": {
+ "regenerator-runtime": "^0.13.11"
+ }
+ },
"@babel/template": {
"version": "7.18.10",
"resolved": "https://registry.npmjs.org/@babel/template/-/template-7.18.10.tgz",
@@ -18075,6 +18120,15 @@
"proxy-from-env": "^1.1.0"
}
},
+ "axios-retry": {
+ "version": "3.4.0",
+ "resolved": "https://registry.npmjs.org/axios-retry/-/axios-retry-3.4.0.tgz",
+ "integrity": "sha512-VdgaP+gHH4iQYCCNUWF2pcqeciVOdGrBBAYUfTY+wPcO5Ltvp/37MLFNCmJKo7Gj3SHvCSdL8ouI1qLYJN3liA==",
+ "requires": {
+ "@babel/runtime": "^7.15.4",
+ "is-retry-allowed": "^2.2.0"
+ }
+ },
"babel-jest": {
"version": "29.3.1",
"resolved": "https://registry.npmjs.org/babel-jest/-/babel-jest-29.3.1.tgz",
@@ -19771,6 +19825,11 @@
"resolved": "https://registry.npmjs.org/is-plain-object/-/is-plain-object-5.0.0.tgz",
"integrity": "sha512-VRSzKkbMm5jMDoKLbltAkFQ5Qr7VDiTFGXxYFXXowVj387GeGNOCsOH6Msy00SGZ3Fp84b1Naa1psqgcCIEP5Q=="
},
+ "is-retry-allowed": {
+ "version": "2.2.0",
+ "resolved": "https://registry.npmjs.org/is-retry-allowed/-/is-retry-allowed-2.2.0.tgz",
+ "integrity": "sha512-XVm7LOeLpTW4jV19QSH38vkswxoLud8sQ57YwJVTPWdiaI9I8keEhGFpBlslyVsgdQy4Opg8QOLb8YRgsyZiQg=="
+ },
"is-stream": {
"version": "2.0.1",
"resolved": "https://registry.npmjs.org/is-stream/-/is-stream-2.0.1.tgz",
@@ -23088,6 +23147,11 @@
"picomatch": "^2.2.1"
}
},
+ "regenerator-runtime": {
+ "version": "0.13.11",
+ "resolved": "https://registry.npmjs.org/regenerator-runtime/-/regenerator-runtime-0.13.11.tgz",
+ "integrity": "sha512-kY1AZVr2Ra+t+piVaJ4gxaFaReZVH40AKNo7UCX6W+dEwBo/2oZJzqfuN1qLq1oL45o56cPaTXELwrTh8Fpggg=="
+ },
"regexpp": {
"version": "3.2.0",
"resolved": "https://registry.npmjs.org/regexpp/-/regexpp-3.2.0.tgz",
diff --git a/backend/package.json b/backend/package.json
index d3ce5a393..89bd52b07 100644
--- a/backend/package.json
+++ b/backend/package.json
@@ -10,6 +10,7 @@
"await-to-js": "^3.0.0",
"aws-sdk": "^2.1311.0",
"axios": "^1.1.3",
+ "axios-retry": "^3.4.0",
"bcrypt": "^5.1.0",
"bigint-conversion": "^2.2.2",
"builder-pattern": "^2.2.0",
diff --git a/backend/src/config/request.ts b/backend/src/config/request.ts
new file mode 100644
index 000000000..afadd1c15
--- /dev/null
+++ b/backend/src/config/request.ts
@@ -0,0 +1,16 @@
+import axios from 'axios';
+import axiosRetry from 'axios-retry';
+
+const axiosInstance = axios.create();
+
+// add retry functionality to the axios instance
+axiosRetry(axiosInstance, {
+ retries: 3,
+ retryDelay: (retryCount) => retryCount * 1000, // delay between retries (in milliseconds)
+ retryCondition: (error) => {
+ // only retry if the error is a network error or a 5xx server error
+ return axiosRetry.isNetworkError(error) || axiosRetry.isRetryableError(error);
+ },
+});
+
+export default axiosInstance;
\ No newline at end of file
diff --git a/backend/src/integrations/sync.ts b/backend/src/integrations/sync.ts
index 61d345c38..70b60dd9f 100644
--- a/backend/src/integrations/sync.ts
+++ b/backend/src/integrations/sync.ts
@@ -32,6 +32,7 @@ import {
INTEGRATION_CIRCLECI_API_URL,
INTEGRATION_TRAVISCI_API_URL,
} from "../variables";
+import axiosWithRetry from '../config/request';
/**
* Sync/push [secrets] to [app] in integration named [integration]
@@ -555,7 +556,7 @@ const syncSecretsVercel = async ({
value: string;
target: string[];
}
-
+
try {
// Get all (decrypted) secrets back from Vercel in
// decrypted format
@@ -568,40 +569,84 @@ const syncSecretsVercel = async ({
: {}),
};
- const res = (
- await Promise.all(
- (
- await axios.get(
- `${INTEGRATION_VERCEL_API_URL}/v9/projects/${integration.app}/env`,
+ // const res = (
+ // await Promise.all(
+ // (
+ // await axios.get(
+ // `${INTEGRATION_VERCEL_API_URL}/v9/projects/${integration.app}/env`,
+ // {
+ // params,
+ // headers: {
+ // Authorization: `Bearer ${accessToken}`,
+ // 'Accept-Encoding': 'application/json'
+ // }
+ // }
+ // ))
+ // .data
+ // .envs
+ // .filter((secret: VercelSecret) => secret.target.includes(integration.targetEnvironment))
+ // .map(async (secret: VercelSecret) => {
+ // if (secret.type === 'encrypted') {
+ // // case: secret is encrypted -> need to decrypt
+ // const decryptedSecret = (await axios.get(
+ // `${INTEGRATION_VERCEL_API_URL}/v9/projects/${integration.app}/env/${secret.id}`,
+ // {
+ // params,
+ // headers: {
+ // Authorization: `Bearer ${accessToken}`,
+ // 'Accept-Encoding': 'application/json'
+ // }
+ // }
+ // )).data;
+
+ // return decryptedSecret;
+ // }
+
+ // return secret;
+ // }))).reduce((obj: any, secret: any) => ({
+ // ...obj,
+ // [secret.key]: secret
+ // }), {});
+
+ const vercelSecrets: VercelSecret[] = (await axiosWithRetry.get(
+ `${INTEGRATION_VERCEL_API_URL}/v9/projects/${integration.app}/env`,
+ {
+ params,
+ headers: {
+ Authorization: `Bearer ${accessToken}`,
+ 'Accept-Encoding': 'application/json'
+ }
+ }
+ ))
+ .data
+ .envs
+ .filter((secret: VercelSecret) => secret.target.includes(integration.targetEnvironment));
+
+ const res: { [key: string]: VercelSecret } = {};
+
+ for await (const vercelSecret of vercelSecrets) {
+ if (vercelSecret.type === 'encrypted') {
+ // case: secret is encrypted -> need to decrypt
+ const decryptedSecret = (await axiosWithRetry.get(
+ `${INTEGRATION_VERCEL_API_URL}/v9/projects/${integration.app}/env/${vercelSecret.id}`,
{
params,
headers: {
Authorization: `Bearer ${accessToken}`,
'Accept-Encoding': 'application/json'
}
- }
- ))
- .data
- .envs
- .filter((secret: VercelSecret) => secret.target.includes(integration.targetEnvironment))
- .map(async (secret: VercelSecret) => (await axios.get(
- `${INTEGRATION_VERCEL_API_URL}/v9/projects/${integration.app}/env/${secret.id}`,
- {
- params,
- headers: {
- Authorization: `Bearer ${accessToken}`,
- 'Accept-Encoding': 'application/json'
- }
- }
- )).data)
- )).reduce((obj: any, secret: any) => ({
- ...obj,
- [secret.key]: secret
- }), {});
+ }
+ )).data;
- const updateSecrets: VercelSecret[] = [];
- const deleteSecrets: VercelSecret[] = [];
- const newSecrets: VercelSecret[] = [];
+ res[vercelSecret.key] = decryptedSecret;
+ } else {
+ res[vercelSecret.key] = vercelSecret;
+ }
+ }
+
+ const updateSecrets: VercelSecret[] = [];
+ const deleteSecrets: VercelSecret[] = [];
+ const newSecrets: VercelSecret[] = [];
// Identify secrets to create
Object.keys(secrets).map((key) => {
@@ -625,8 +670,10 @@ const syncSecretsVercel = async ({
id: res[key].id,
key: key,
value: secrets[key],
- type: "encrypted",
- target: [integration.targetEnvironment],
+ type: res[key].type,
+ target: res[key].target.includes(integration.targetEnvironment)
+ ? [...res[key].target]
+ : [...res[key].target, integration.targetEnvironment]
});
}
} else {
@@ -635,7 +682,7 @@ const syncSecretsVercel = async ({
id: res[key].id,
key: key,
value: res[key].value,
- type: "encrypted",
+ type: "encrypted", // value doesn't matter
target: [integration.targetEnvironment],
});
}
@@ -643,7 +690,7 @@ const syncSecretsVercel = async ({
// Sync/push new secrets
if (newSecrets.length > 0) {
- await axios.post(
+ await axiosWithRetry.post(
`${INTEGRATION_VERCEL_API_URL}/v10/projects/${integration.app}/env`,
newSecrets,
{
@@ -655,12 +702,11 @@ const syncSecretsVercel = async ({
}
);
}
-
- // Sync/push updated secrets
- if (updateSecrets.length > 0) {
- updateSecrets.forEach(async (secret: VercelSecret) => {
+
+ for await (const secret of updateSecrets) {
+ if (secret.type !== 'sensitive') {
const { id, ...updatedSecret } = secret;
- await axios.patch(
+ await axiosWithRetry.patch(
`${INTEGRATION_VERCEL_API_URL}/v9/projects/${integration.app}/env/${secret.id}`,
updatedSecret,
{
@@ -671,23 +717,20 @@ const syncSecretsVercel = async ({
},
}
);
- });
+ }
}
- // Delete secrets
- if (deleteSecrets.length > 0) {
- deleteSecrets.forEach(async (secret: VercelSecret) => {
- await axios.delete(
- `${INTEGRATION_VERCEL_API_URL}/v9/projects/${integration.app}/env/${secret.id}`,
- {
- params,
- headers: {
- Authorization: `Bearer ${accessToken}`,
- 'Accept-Encoding': 'application/json'
- },
- }
- );
- });
+ for await (const secret of deleteSecrets) {
+ await axiosWithRetry.delete(
+ `${INTEGRATION_VERCEL_API_URL}/v9/projects/${integration.app}/env/${secret.id}`,
+ {
+ params,
+ headers: {
+ Authorization: `Bearer ${accessToken}`,
+ 'Accept-Encoding': 'application/json'
+ },
+ }
+ );
}
} catch (err) {
Sentry.setUser(null);
diff --git a/backend/src/routes/v2/workspace.ts b/backend/src/routes/v2/workspace.ts
index 9a753badd..6183c9e66 100644
--- a/backend/src/routes/v2/workspace.ts
+++ b/backend/src/routes/v2/workspace.ts
@@ -118,7 +118,6 @@ router.delete( // TODO - rewire dashboard to this route
workspaceController.deleteWorkspaceMembership
);
-
router.patch(
'/:workspaceId/auto-capitalization',
requireAuth({
diff --git a/backend/src/services/EventService.ts b/backend/src/services/EventService.ts
index fcbac9ad0..9f982bf75 100644
--- a/backend/src/services/EventService.ts
+++ b/backend/src/services/EventService.ts
@@ -1,5 +1,3 @@
-import { Bot, IBot } from '../models';
-import * as Sentry from '@sentry/node';
import { handleEventHelper } from '../helpers/event';
interface Event {
diff --git a/backend/src/services/smtp.ts b/backend/src/services/smtp.ts
index f960f6bae..8debfdb6f 100644
--- a/backend/src/services/smtp.ts
+++ b/backend/src/services/smtp.ts
@@ -1,6 +1,10 @@
import nodemailer from 'nodemailer';
import { SMTP_HOST, SMTP_PORT, SMTP_USERNAME, SMTP_PASSWORD, SMTP_SECURE } from '../config';
-import { SMTP_HOST_SENDGRID, SMTP_HOST_MAILGUN } from '../variables';
+import {
+ SMTP_HOST_SENDGRID,
+ SMTP_HOST_MAILGUN,
+ SMTP_HOST_SOCKETLABS
+} from '../variables';
import SMTPConnection from 'nodemailer/lib/smtp-connection';
import * as Sentry from '@sentry/node';
@@ -27,6 +31,12 @@ if (SMTP_SECURE) {
ciphers: 'TLSv1.2'
}
break;
+ case SMTP_HOST_SOCKETLABS:
+ mailOpts.requireTLS = true;
+ mailOpts.tls = {
+ ciphers: 'TLSv1.2'
+ }
+ break;
default:
if (SMTP_HOST.includes('amazonaws.com')) {
mailOpts.tls = {
diff --git a/backend/src/variables/index.ts b/backend/src/variables/index.ts
index 9d16b7f43..2be394971 100644
--- a/backend/src/variables/index.ts
+++ b/backend/src/variables/index.ts
@@ -44,7 +44,11 @@ import {
ACTION_DELETE_SECRETS,
ACTION_READ_SECRETS
} from './action';
-import { SMTP_HOST_SENDGRID, SMTP_HOST_MAILGUN } from './smtp';
+import {
+ SMTP_HOST_SENDGRID,
+ SMTP_HOST_MAILGUN,
+ SMTP_HOST_SOCKETLABS
+} from './smtp';
import { PLAN_STARTER, PLAN_PRO } from './stripe';
import {
MFA_METHOD_EMAIL
@@ -105,6 +109,7 @@ export {
INTEGRATION_OPTIONS,
SMTP_HOST_SENDGRID,
SMTP_HOST_MAILGUN,
+ SMTP_HOST_SOCKETLABS,
PLAN_STARTER,
PLAN_PRO,
MFA_METHOD_EMAIL,
diff --git a/backend/src/variables/smtp.ts b/backend/src/variables/smtp.ts
index 4db7c9f12..c807ddf05 100644
--- a/backend/src/variables/smtp.ts
+++ b/backend/src/variables/smtp.ts
@@ -1,7 +1,9 @@
const SMTP_HOST_SENDGRID = 'smtp.sendgrid.net';
const SMTP_HOST_MAILGUN = 'smtp.mailgun.org';
+const SMTP_HOST_SOCKETLABS = 'smtp.socketlabs.com';
export {
SMTP_HOST_SENDGRID,
- SMTP_HOST_MAILGUN
+ SMTP_HOST_MAILGUN,
+ SMTP_HOST_SOCKETLABS
}
\ No newline at end of file
diff --git a/cli/packages/cmd/export.go b/cli/packages/cmd/export.go
index d1e72ff2d..649de41f2 100644
--- a/cli/packages/cmd/export.go
+++ b/cli/packages/cmd/export.go
@@ -36,9 +36,12 @@ var exportCmd = &cobra.Command{
// util.RequireLocalWorkspaceFile()
},
Run: func(cmd *cobra.Command, args []string) {
- envName, err := cmd.Flags().GetString("env")
- if err != nil {
- util.HandleError(err)
+ environmentName, _ := cmd.Flags().GetString("env")
+ if !cmd.Flags().Changed("env") {
+ environmentFromWorkspace := util.GetEnvelopmentBasedOnGitBranch()
+ if environmentFromWorkspace != "" {
+ environmentName = environmentFromWorkspace
+ }
}
shouldExpandSecrets, err := cmd.Flags().GetBool("expand")
@@ -66,7 +69,7 @@ var exportCmd = &cobra.Command{
util.HandleError(err, "Unable to parse flag")
}
- secrets, err := util.GetAllEnvironmentVariables(models.GetAllSecretsParameters{Environment: envName, InfisicalToken: infisicalToken, TagSlugs: tagSlugs})
+ secrets, err := util.GetAllEnvironmentVariables(models.GetAllSecretsParameters{Environment: environmentName, InfisicalToken: infisicalToken, TagSlugs: tagSlugs})
if err != nil {
util.HandleError(err, "Unable to fetch secrets")
}
diff --git a/cli/packages/cmd/login.go b/cli/packages/cmd/login.go
index e09253407..092bcdfa1 100644
--- a/cli/packages/cmd/login.go
+++ b/cli/packages/cmd/login.go
@@ -87,7 +87,7 @@ var loginCmd = &cobra.Command{
break
} else if mfaErrorResponse != nil {
if mfaErrorResponse.Context.Code == "mfa_invalid" {
- msg := fmt.Sprintf("Incorrect, MFA code. You have %v attempts left", 5-i)
+ msg := fmt.Sprintf("Incorrect, verification code. You have %v attempts left", 5-i)
fmt.Println(msg)
if i == 5 {
util.PrintErrorMessageAndExit("No tries left, please try again in a bit")
@@ -96,7 +96,7 @@ var loginCmd = &cobra.Command{
}
if mfaErrorResponse.Context.Code == "mfa_expired" {
- util.PrintErrorMessageAndExit("Your MFA code has expired, please try logging in again")
+ util.PrintErrorMessageAndExit("Your 2FA verification code has expired, please try logging in again")
break
}
i++
@@ -120,6 +120,7 @@ var loginCmd = &cobra.Command{
var decryptedPrivateKey []byte
if loginTwoResponse.EncryptionVersion == 1 {
+ log.Debug("Login version 1")
encryptedPrivateKey, _ := base64.StdEncoding.DecodeString(loginTwoResponse.EncryptedPrivateKey)
tag, err := base64.StdEncoding.DecodeString(loginTwoResponse.Tag)
if err != nil {
@@ -134,11 +135,15 @@ var loginCmd = &cobra.Command{
paddedPassword := fmt.Sprintf("%032s", password)
key := []byte(paddedPassword)
- decryptedPrivateKey, err := crypto.DecryptSymmetric(key, encryptedPrivateKey, tag, IV)
- if err != nil || len(decryptedPrivateKey) == 0 {
+ computedDecryptedPrivateKey, err := crypto.DecryptSymmetric(key, encryptedPrivateKey, tag, IV)
+ if err != nil || len(computedDecryptedPrivateKey) == 0 {
util.HandleError(err)
}
+
+ decryptedPrivateKey = computedDecryptedPrivateKey
+
} else if loginTwoResponse.EncryptionVersion == 2 {
+ log.Debug("Login version 2")
protectedKey, err := base64.StdEncoding.DecodeString(loginTwoResponse.ProtectedKey)
if err != nil {
util.HandleError(err)
@@ -191,14 +196,21 @@ var loginCmd = &cobra.Command{
util.HandleError(err)
}
- decryptedPrivateKey, err = crypto.DecryptSymmetric(decryptedProtectedKeyInHex, encryptedPrivateKey, nonProtectedTag, nonProtectedIv)
+ computedDecryptedPrivateKey, err := crypto.DecryptSymmetric(decryptedProtectedKeyInHex, encryptedPrivateKey, nonProtectedTag, nonProtectedIv)
if err != nil {
util.HandleError(err)
}
+
+ decryptedPrivateKey = computedDecryptedPrivateKey
} else {
util.PrintErrorMessageAndExit("Insufficient details to decrypt private key")
}
+ if string(decryptedPrivateKey) == "" || email == "" || loginTwoResponse.Token == "" {
+ log.Debugf("[decryptedPrivateKey=%s] [email=%s] [loginTwoResponse.Token=%s]", string(decryptedPrivateKey), email, loginTwoResponse.Token)
+ util.PrintErrorMessageAndExit("We were unable to fetch required details to complete your login. Run with -d to see more info")
+ }
+
userCredentialsToBeStored := &models.UserCredentials{
Email: email,
PrivateKey: string(decryptedPrivateKey),
@@ -340,7 +352,7 @@ func generateFromPassword(password string, salt []byte, p *params) (hash []byte,
func askForMFACode() string {
mfaCodePromptUI := promptui.Prompt{
- Label: "MFA verification code",
+ Label: "Enter the 2FA verification code sent to your email",
}
mfaVerifyCode, err := mfaCodePromptUI.Run()
diff --git a/cli/packages/cmd/run.go b/cli/packages/cmd/run.go
index 70c6e627d..f70d29726 100644
--- a/cli/packages/cmd/run.go
+++ b/cli/packages/cmd/run.go
@@ -54,9 +54,12 @@ var runCmd = &cobra.Command{
return nil
},
Run: func(cmd *cobra.Command, args []string) {
- envName, err := cmd.Flags().GetString("env")
- if err != nil {
- util.HandleError(err, "Unable to parse flag")
+ environmentName, _ := cmd.Flags().GetString("env")
+ if !cmd.Flags().Changed("env") {
+ environmentFromWorkspace := util.GetEnvelopmentBasedOnGitBranch()
+ if environmentFromWorkspace != "" {
+ environmentName = environmentFromWorkspace
+ }
}
infisicalToken, err := cmd.Flags().GetString("token")
@@ -79,7 +82,7 @@ var runCmd = &cobra.Command{
util.HandleError(err, "Unable to parse flag")
}
- secrets, err := util.GetAllEnvironmentVariables(models.GetAllSecretsParameters{Environment: envName, InfisicalToken: infisicalToken, TagSlugs: tagSlugs})
+ secrets, err := util.GetAllEnvironmentVariables(models.GetAllSecretsParameters{Environment: environmentName, InfisicalToken: infisicalToken, TagSlugs: tagSlugs})
if err != nil {
util.HandleError(err, "Could not fetch secrets", "If you are using a service token to fetch secrets, please ensure it is valid")
diff --git a/cli/packages/cmd/secrets.go b/cli/packages/cmd/secrets.go
index 4bb8d0663..625152aa9 100644
--- a/cli/packages/cmd/secrets.go
+++ b/cli/packages/cmd/secrets.go
@@ -19,7 +19,6 @@ import (
"github.com/Infisical/infisical-merge/packages/util"
"github.com/Infisical/infisical-merge/packages/visualize"
"github.com/go-resty/resty/v2"
- log "github.com/sirupsen/logrus"
"github.com/spf13/cobra"
)
@@ -31,9 +30,12 @@ var secretsCmd = &cobra.Command{
PreRun: toggleDebug,
Args: cobra.NoArgs,
Run: func(cmd *cobra.Command, args []string) {
- environmentName, err := cmd.Flags().GetString("env")
- if err != nil {
- util.HandleError(err)
+ environmentName, _ := cmd.Flags().GetString("env")
+ if !cmd.Flags().Changed("env") {
+ environmentFromWorkspace := util.GetEnvelopmentBasedOnGitBranch()
+ if environmentFromWorkspace != "" {
+ environmentName = environmentFromWorkspace
+ }
}
infisicalToken, err := cmd.Flags().GetString("token")
@@ -94,9 +96,12 @@ var secretsSetCmd = &cobra.Command{
Run: func(cmd *cobra.Command, args []string) {
util.RequireLocalWorkspaceFile()
- environmentName, err := cmd.Flags().GetString("env")
- if err != nil {
- util.HandleError(err, "Unable to parse flag")
+ environmentName, _ := cmd.Flags().GetString("env")
+ if !cmd.Flags().Changed("env") {
+ environmentFromWorkspace := util.GetEnvelopmentBasedOnGitBranch()
+ if environmentFromWorkspace != "" {
+ environmentName = environmentFromWorkspace
+ }
}
workspaceFile, err := util.GetWorkSpaceFromFile()
@@ -270,11 +275,12 @@ var secretsDeleteCmd = &cobra.Command{
PreRun: toggleDebug,
Args: cobra.MinimumNArgs(1),
Run: func(cmd *cobra.Command, args []string) {
- environmentName, err := cmd.Flags().GetString("env")
- if err != nil {
- log.Errorln("Unable to parse the environment name flag")
- log.Debugln(err)
- return
+ environmentName, _ := cmd.Flags().GetString("env")
+ if !cmd.Flags().Changed("env") {
+ environmentFromWorkspace := util.GetEnvelopmentBasedOnGitBranch()
+ if environmentFromWorkspace != "" {
+ environmentName = environmentFromWorkspace
+ }
}
loggedInUserDetails, err := util.GetCurrentLoggedInUserDetails()
@@ -330,9 +336,12 @@ var secretsDeleteCmd = &cobra.Command{
}
func getSecretsByNames(cmd *cobra.Command, args []string) {
- environmentName, err := cmd.Flags().GetString("env")
- if err != nil {
- util.HandleError(err, "Unable to parse flag")
+ environmentName, _ := cmd.Flags().GetString("env")
+ if !cmd.Flags().Changed("env") {
+ environmentFromWorkspace := util.GetEnvelopmentBasedOnGitBranch()
+ if environmentFromWorkspace != "" {
+ environmentName = environmentFromWorkspace
+ }
}
infisicalToken, err := cmd.Flags().GetString("token")
@@ -373,9 +382,12 @@ func getSecretsByNames(cmd *cobra.Command, args []string) {
}
func generateExampleEnv(cmd *cobra.Command, args []string) {
- environmentName, err := cmd.Flags().GetString("env")
- if err != nil {
- util.HandleError(err, "Unable to parse flag")
+ environmentName, _ := cmd.Flags().GetString("env")
+ if !cmd.Flags().Changed("env") {
+ environmentFromWorkspace := util.GetEnvelopmentBasedOnGitBranch()
+ if environmentFromWorkspace != "" {
+ environmentName = environmentFromWorkspace
+ }
}
infisicalToken, err := cmd.Flags().GetString("token")
diff --git a/cli/packages/models/cli.go b/cli/packages/models/cli.go
index fca9ae0f2..c2cee9463 100644
--- a/cli/packages/models/cli.go
+++ b/cli/packages/models/cli.go
@@ -39,8 +39,9 @@ type Workspace struct {
}
type WorkspaceConfigFile struct {
- WorkspaceId string `json:"workspaceId"`
- DefaultEnvironment string `json:"defaultEnvironment"`
+ WorkspaceId string `json:"workspaceId"`
+ DefaultEnvironment string `json:"defaultEnvironment"`
+ GitBranchToEnvironmentMapping map[string]string `json:"gitBranchToEnvironmentMapping"`
}
type SymmetricEncryptionResult struct {
@@ -50,7 +51,8 @@ type SymmetricEncryptionResult struct {
}
type GetAllSecretsParameters struct {
- Environment string
- InfisicalToken string
- TagSlugs string
+ Environment string
+ EnvironmentPassedViaFlag bool
+ InfisicalToken string
+ TagSlugs string
}
diff --git a/cli/packages/util/helper.go b/cli/packages/util/helper.go
index 2a7ac7317..8d70e9e0a 100644
--- a/cli/packages/util/helper.go
+++ b/cli/packages/util/helper.go
@@ -1,10 +1,14 @@
package util
import (
+ "bytes"
"crypto/sha256"
"encoding/base64"
"fmt"
"os"
+ "os/exec"
+ "path"
+ "strings"
)
type DecodedSymmetricEncryptionDetails = struct {
@@ -110,3 +114,14 @@ func GetHashFromStringList(list []string) string {
sum := sha256.Sum256(hash.Sum(nil))
return fmt.Sprintf("%x", sum)
}
+
+func getCurrentBranch() (string, error) {
+ cmd := exec.Command("git", "symbolic-ref", "--short", "HEAD")
+ var out bytes.Buffer
+ cmd.Stdout = &out
+ err := cmd.Run()
+ if err != nil {
+ return "", err
+ }
+ return path.Base(strings.TrimSpace(out.String())), nil
+}
diff --git a/cli/packages/util/secrets.go b/cli/packages/util/secrets.go
index 8caa07de4..95065de66 100644
--- a/cli/packages/util/secrets.go
+++ b/cli/packages/util/secrets.go
@@ -131,10 +131,6 @@ func GetAllEnvironmentVariables(params models.GetAllSecretsParameters) ([]models
return nil, err
}
- if workspaceFile.DefaultEnvironment != "" {
- params.Environment = workspaceFile.DefaultEnvironment
- }
-
// Verify environment
err = ValidateEnvironmentName(params.Environment, workspaceFile.WorkspaceId, loggedInUserDetails.UserCredentials)
if err != nil {
@@ -485,3 +481,27 @@ func DeleteBackupSecrets() error {
return os.RemoveAll(fullPathToSecretsBackupFolder)
}
+
+func GetEnvelopmentBasedOnGitBranch() string {
+ branch, err := getCurrentBranch()
+ if err != nil {
+ log.Debugf("getEnvelopmentBasedOnGitBranch: [err=%s]", err)
+ }
+
+ workspaceFile, err := GetWorkSpaceFromFile()
+ if err != nil {
+ log.Debugf("getEnvelopmentBasedOnGitBranch: [err=%s]", err)
+ return ""
+ }
+
+ envBasedOnGitBranch, ok := workspaceFile.GitBranchToEnvironmentMapping[branch]
+
+ log.Debugf("GetEnvelopmentBasedOnGitBranch: [envBasedOnGitBranch=%s] [ok=%s]", envBasedOnGitBranch, ok)
+
+ if err == nil && ok {
+ return envBasedOnGitBranch
+ } else {
+ log.Debugf("getEnvelopmentBasedOnGitBranch: [err=%s]", err)
+ return ""
+ }
+}
diff --git a/docs/cli/faq.mdx b/docs/cli/faq.mdx
index 7eb73258e..daeeb6458 100644
--- a/docs/cli/faq.mdx
+++ b/docs/cli/faq.mdx
@@ -18,4 +18,8 @@ If you are still experiencing trouble, please seek support.
| Head#1 | +Head#2 | +Head#3 | +
|---|
| {children} | +{children} | ); // table body @@ -95,3 +100,25 @@ export const Td = ({ children, className, ...props }: TdProps): JSX.Element => ( {children} ); + +export type TBodyLoader = { + rows?: number; + columns: number; + className?: string; + // unique key for mapping + key: string; +}; + +export const TableSkeleton = ({ rows = 3, columns, key, className }: TBodyLoader): JSX.Element => ( + <> + {Array.apply(0, Array(rows)).map((_x, i) => ( +
|---|---|
|
+ |
+ ))}
+ |
| {email} | -
- |
-
| {email} | +
+ |
+
{t('settings-project:auto-capitalization')}
+Secret Tags
-Every secret can be assigned to one or more tags. Here you can add and remove tags for the current project.
++ Every secret can be assigned to one or more tags. Here you can add and remove tags for + the current project. +
| {name} | @@ -149,7 +156,7 @@ export const SecretTagsSection = ({|||||||||||||||||||||||||||||||||||||||||
| - No tags found for this project + |
+ |
||||||||||||||||||||||||||||||||||||||||
| {row.name} | @@ -290,11 +295,11 @@ export const ServiceTokenSection = ({|||||||||||||||||||||||||||||||||||||||||
|
- No service tokens found
+ |
| Plattformen | +Frameworks | +||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
+
+
|
+
+
+
|
+
+
+## 🌎 Übersetzungen
+
+Infisical ist zurzeit in Englisch, Koreanisch, Franzözisch, und Portugiesisch (Brasilien) verfügbar. Hilf uns, Infisical in deine Sprache zu übersetzen!
+
+Du kannst alle Infos dazu in [diesem Issue](https://github.com/Infisical/infisical/issues/181) finden.
diff --git a/i18n/README.en.md b/i18n/README.en.md
index 1ec8cff50..92f2388bf 100644
--- a/i18n/README.en.md
+++ b/i18n/README.en.md
@@ -3,7 +3,7 @@
-
Open-source, E2EE, simple tool to manage secrets and configs across your team and infrastructure.
+Open-source, end-to-end encrypted tool to manage secrets and configs across your team, devices, and infrastructure.
+
@@ -25,7 +25,7 @@
- 
+
@@ -37,29 +37,32 @@
-
-**Read this in other languages**: [](i18n/README.en.md)
+**Read this in other languages**: [](i18n/README.en.md)
[](i18n/README.es.md)
+[](i18n/README.de.md)
[](i18n/README.ko.md)
[](i18n/README.tr.md)
+[](i18n/README.id.md)
-**[Infisical](https://infisical.com)** is an open source, E2EE tool to help teams manage and sync secrets and configs across their development workflow and infrastructure. It's designed to be simple and take minutes to get going.
+**[Infisical](https://infisical.com)** is an open source, end-to-end encrypted secret manager which you can use to centralize your API keys and configs. From Infisical, you can then distribute these secrets across your whole development lifecycle - from development to production . It's designed to be simple and take minutes to get going.
-- **[User-Friendly Dashboard](https://infisical.com/docs/getting-started/dashboard/project)** to manage your team's secrets and configs within projects
-- **[Language-Agnostic CLI](https://infisical.com/docs/cli/overview)** that pulls and injects esecrets and configs into your local workflow
-- **[Complete control over your data](https://infisical.com/docs/self-hosting/overview)** - host it yourself on any infrastructure
-- **Navigate Multiple Environments** per project (e.g. development, staging, production, etc.)
-- **Personal overrides** for secrets and configs
-- **[Integrations](https://infisical.com/docs/integrations/overview)** with CI/CD and production infrastructure
-- **[Infisical API](https://infisical.com/docs/api-reference/overview/introduction)** - manage secrets via HTTPS requests to the platform
-- **[Secret Versioning](https://infisical.com/docs/getting-started/dashboard/versioning)** to view the change history for any secret
-- **[Activity Logs](https://infisical.com/docs/getting-started/dashboard/audit-logs)** to record every action taken in a project
-- **[Point-in-time Secrets Recovery](https://infisical.com/docs/getting-started/dashboard/pit-recovery)** for rolling back to any snapshot of your secrets
-- **Role-based Access Controls** per environment
-- 🔜 **2FA** (next week)
-- 🔜 **1-Click Deploy** to Digital Ocean and Heroku
-- 🔜 **Automatic Secret Rotation**
-- 🔜 **Slack & MS Teams** integrations
+- **[User-Friendly Dashboard](https://infisical.com/docs/getting-started/dashboard/project)** to manage your team's secrets and configs within projects
+- **[Language-Agnostic CLI](https://infisical.com/docs/cli/overview)** that pulls and injects esecrets and configs into your local workflow
+- **[Complete control over your data](https://infisical.com/docs/self-hosting/overview)** - host it yourself on any infrastructure
+- **Navigate Multiple Environments** per project (e.g. development, staging, production, etc.)
+- **Personal overrides** for secrets and configs
+- **[Integrations](https://infisical.com/docs/integrations/overview)** with CI/CD and production infrastructure
+- **[Infisical API](https://infisical.com/docs/api-reference/overview/introduction)** - manage secrets via HTTPS requests to the platform
+- **[Secret Versioning](https://infisical.com/docs/getting-started/dashboard/versioning)** to view the change history for any secret
+- **[Activity Logs](https://infisical.com/docs/getting-started/dashboard/audit-logs)** to record every action taken in a project
+- **[Point-in-time Secrets Recovery](https://infisical.com/docs/getting-started/dashboard/pit-recovery)** for rolling back to any snapshot of your secrets
+- **Role-based Access Controls** per environment
+- **2FA** (more options coming soon)
+- 🔜 **1-Click Deploy** to AWS
+- 🔜 **Automatic Secret Rotation**
+- 🔜 **Smart Security Alerts**
+- 🔜 **Secrets Rotation**
+- 🔜 **Slack & MS Teams** integrations
And more.
@@ -68,9 +71,8 @@ And more.
To quickly get started, visit our [get started guide](https://infisical.com/docs/getting-started/introduction).
- 
- 
- 
+ 
+ 
| - 🔜 AWS PS (https://github.com/Infisical/infisical/issues/286) + 🔜 Supabase | @@ -171,7 +151,9 @@ We're currently setting the foundation and building [integrations](https://infis 🔜 GCP SM (https://github.com/Infisical/infisical/issues/285) | - 🔜 GitLab CI/CD (https://github.com/Infisical/infisical/issues/134) + + ✔️ GitLab CI/CD + | 🔜 CircleCI (https://github.com/Infisical/infisical/issues/91) @@ -193,8 +175,8 @@ We're currently setting the foundation and building [integrations](https://infis 🔜 TravisCI | - - ✔️ Netlify + + ✔️ AWS Secrets Manager | @@ -206,7 +188,9 @@ We're currently setting the foundation and building [integrations](https://infis 🔜 Bitbucket | - 🔜 Supabase + + ✔️ AWS Parameter Store + | @@ -222,7 +206,9 @@ We're currently setting the foundation and building [integrations](https://infis 🔜 Serverless | - 🔜 AWS Lambda + + ✔️ Netlify + |
+
## 🌎 Translations
diff --git a/i18n/README.es.md b/i18n/README.es.md
index d579bfa1c..f97f249d7 100644
--- a/i18n/README.es.md
+++ b/i18n/README.es.md
@@ -16,7 +16,7 @@
+
@@ -105,12 +105,13 @@ Estamos actualmente en Alpha público.
Actualmente estamos sentando bases y construyendo [integraciones](https://infisical.com/docs/integrations/overview) para que los secretos se puedan sincronizar en todas partes. ¡Cualquier ayuda es bienvenida! :)
+
| Plataformas | Marcos | ||||||||
|---|---|---|---|---|---|---|---|---|---|
|
-
+
++
Sumber terbuka, enkripsi ujung ke ujung, alat sederhana untuk mengelola rahasia dan konfigurasi di seluruh tim dan infrastruktur Anda.
+ + +
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 
+
+
+
+**Baca ini dalam bahasa lain**: [](i18n/README.en.md)
+[](i18n/README.es.md)
+[](i18n/README.de.md)
+[](i18n/README.ko.md)
+[](i18n/README.tr.md)
+[](i18n/README.id.md)
+
+**[Infisical](https://infisical.com)** adalah alat E2EE sumber terbuka untuk membantu tim mengelola dan menyinkronkan rahasia dan konfigurasi di seluruh alur kerja dan infrastruktur pengembangan mereka. Ini dirancang agar sederhana dan membutuhkan beberapa menit untuk memulai.
+
+- **[Dasbor User-friendly](https://infisical.com/docs/getting-started/dashboard/project)** untuk mengelola rahasia dan konfigurasi tim Anda dalam proyek
+- **[CLI Language-Agnostic](https://infisical.com/docs/cli/overview)** yang menarik dan menyuntikkan rahasia dan konfigurasi ke dalam alur kerja lokal Anda
+- **[Kontrol penuh atas data Anda](https://infisical.com/docs/self-hosting/overview)** - host sendiri di infrastruktur apa pun
+- **Menavigasi Banyak Lingkungan** per proyek (misalnya pengembangan, pementasan, produksi, dll.)
+- **Override personal** untuk rahasia dan konfigurasi
+- **[Integrasi](https://infisical.com/docs/integrations/overview)** dengan CI/CD dan infrastruktur produksi
+- **[API Infisical](https://infisical.com/docs/api-reference/overview/introduction)** - mengelola rahasia melalui permintaan HTTPS ke platform
+- **[Versioning Rahasia](https://infisical.com/docs/getting-started/dashboard/versioning)** untuk melihat riwayat perubahan rahasia apa pun
+- **[Log Aktivitas](https://infisical.com/docs/getting-started/dashboard/audit-logs)** untuk merekam setiap tindakan yang diambil dalam sebuah proyek
+- **[Pemulihan Rahasia Point-in-time](https://infisical.com/docs/getting-started/dashboard/pit-recovery)** untuk memutar kembali ke cuplikan rahasia Anda
+- **Kontrol Akses Berbasis Peran** per lingkungan
+- **2FA**
+- 🔜 **1-Click Deploy** ke Digital Ocean dan Heroku
+- 🔜 **Rotasi Rahasia Otomatis**
+- 🔜 **Integrasi Slack & MS Teams**
+
+Dan banyak lagi.
+
+## 🚀 Memulai
+
+Untuk memulai dengan cepat, kunjungi [panduan memulai](https://infisical.com/docs/getting-started/introduction) kami.
+
+
+
+
+
+
| Platforms | +Frameworks | +||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
+
+
|
+
+
+
|
+
+
+## 🌎 Terjemahan
+
+Infisical saat ini tersedia dalam bahasa Inggris, Korea, Prancis, Portugis (Brasil), dan Bahasa Indonesia. Bantu kami menerjemahkan Infisical ke bahasa Anda!
+
+Anda dapat menemukan semua info di [masalah ini](https://github.com/Infisical/infisical/issues/181).
diff --git a/i18n/README.ko.md b/i18n/README.ko.md
index bab9e4d49..e5471ba9c 100644
--- a/i18n/README.ko.md
+++ b/i18n/README.ko.md
@@ -49,10 +49,10 @@
- **[시크릿 버전 기록](https://infisical.com/docs/getting-started/dashboard/versioning)** 을 통해 어떤 시크릿이든 버전 기록을 볼 수 있어요
- **[활동 로그](https://infisical.com/docs/getting-started/dashboard/audit-logs)** 를 통해 프로젝트의 모든 활동을 볼 수 있어요
- **[지정 시점으로 시크릿 복구](https://infisical.com/docs/getting-started/dashboard/pit-recovery)** 를 사용해 특정한 시점으로 시크릿을 복구할 수 있어요
+- **2단계 인증**
+- **프로젝트 별 인증** (read/write 컨트롤도 곧 찾아옵니다)
- 🔜 Digital Ocean 및 Heroku로 **원클릭 배포**
-- 🔜 **프로젝트 별 인증** (read/write 컨트롤도 곧 찾아옵니다)
- 🔜 **자동 시크릿 로테이션**
-- 🔜 **2단계 인증**
- 🔜 **Slack & MS Teams** 연동
그 외에 더 많은 기능들이 있어요.
diff --git a/i18n/README.pt-br.md b/i18n/README.pt-br.md
new file mode 100644
index 000000000..08bc9a8c3
--- /dev/null
+++ b/i18n/README.pt-br.md
@@ -0,0 +1,368 @@
+
+
++
Uma ferramenta de código aberto para encriptação ponta-a-ponta para gerenciar suas chaves e configurações secretas de sua equipe, dispositivos e infraestrutura
+ + +
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+**Leia essa documentação em outra linguagem**: [](i18n/README.en.md)
+[](i18n/README.es.md)
+[](i18n/README.de.md)
+[](i18n/README.ko.md)
+[](i18n/README.tr.md)
+[](i18n/README.id.md)
+[](i18n/README.id.md)
+
+**[Infisical](https://infisical.com)** é uma ferramenta de código aberto para gerenciamento de segredos encriptados ponta-a-ponta que você pode usar para centralizar suas chaves e configurações. A partir do Infisical, você pode distribuir esses segredos em todo o seu ciclo de vida de desenvolvimento - desde o desenvolvimento até a produção. Ele foi projetado para ser simples e levar minutos para começar.
+
+- **[Dashboard amigável](https://infisical.com/docs/getting-started/dashboard/project)** para gerenciar os segredos e configurações de sua equipe dentro de projetos
+- **[CLI Fléxivel](https://infisical.com/docs/cli/overview)** puxa e injeta segredos e configurações em seu fluxo de trabalho local
+- **[Controle completo de seus dados](https://infisical.com/docs/self-hosting/overview)** - hospede-o você mesmo em qualquer infraestrutura
+- **Multiplos ambientes** por projeto (ex. desenvolvimento, testes, produção, etc.)
+- **Substituições pessoais** para os segredos e configurações
+- **[Integrações](https://infisical.com/docs/integrations/overview)** com CI/CD e infraestrutura de produção
+- **[Infisical API](https://infisical.com/docs/api-reference/overview/introduction)** - gerencie segredos via solicitações HTTPS para a plataforma
+- **[Versionamento dos seus segredos](https://infisical.com/docs/getting-started/dashboard/versioning)** para visualizar o histórico de alterações de qualquer segredo
+- **[Logs de atividade](https://infisical.com/docs/getting-started/dashboard/audit-logs)** para registrar todas as ações realizadas em um projeto
+- **[Recuperações dos secretos em ponto específico](https://infisical.com/docs/getting-started/dashboard/pit-recovery)** para voltar para qualquer momento do histórico de versões de seus segredos
+- **Controle de acesso baseada em regras** por ambiente
+- **2FA** (mais opções em breve)
+- 🔜 **Deploy em 1 clique** para AWS
+- 🔜 **Rotação automática de segredos**
+- 🔜 **Alertas de segurança inteligentes**
+- 🔜 **Rotação de segredos**
+- 🔜 Integração com **Slack e MS Teams**
+
+E muito mais!
+
+## 🚀 Começando
+
+para começar rapidamente visite [nosso guia inicial](https://infisical.com/docs/getting-started/introduction).
+
+
+
+
+
| Plataforma | +Frameworks | +||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
+
+
|
+
+
+
|
+
+
+## 🌎 Traduções
+
+Infisical é atualmente disponível em inglês, coreano, francês e português (Brasil). Ajude-nos a traduzir Infisical para o seu idioma!
+
+Você pode procurar mais informações [nessa issue](https://github.com/Infisical/infisical/issues/181).
diff --git a/i18n/README.tr.md b/i18n/README.tr.md
index bef6aa6b8..263bd9a61 100644
--- a/i18n/README.tr.md
+++ b/i18n/README.tr.md
@@ -16,7 +16,7 @@
+
@@ -47,10 +47,10 @@ Basit olması için tasarlandı, sadece birkaç dakika içerisinde harekete geç
- **[Sırlar İçin Versiyon Kontrol](https://infisical.com/docs/getting-started/dashboard/versioning)** - herhangi bir sır için değişiklik geçmişini görüntüleyin.
- **[Aktivite Günlükleri](https://infisical.com/docs/getting-started/dashboard/audit-logs)** - projedeki tüm değişikleri kayıt altına almak için.
- **[Anında Geri Yükleme](https://infisical.com/docs/getting-started/dashboard/pit-recovery)** - sırlarınızın herhangi bir snapshotına geri yükleme yapmanız için.
+- **2 Faktör Kimlik Doğrulama**
- 🔜 **Tek tıkla Deploy** edin, Digital Ocean ve Heroku'ya.
- 🔜 **Kimlik Doğrulama/Yetkilendirme** projeleriniz için okuma/yazma kontrolleri (pek yakında)
- 🔜 **Otomatik Sır Rotasyonu**
-- 🔜 **2 Faktör Kimlik Doğrulama**
- 🔜 **Erişim Günlükleri**
- 🔜 **Slack & MS Teams** entegrasyonları
@@ -109,7 +109,7 @@ Nereden başlayacağınızdan emin değil misiniz? O zaman;
| - 🔜 AWS PS (https://github.com/Infisical/infisical/issues/286) + 🔜 Supabase | @@ -166,7 +166,9 @@ Nereden başlayacağınızdan emin değil misiniz? O zaman; 🔜 GCP SM (https://github.com/Infisical/infisical/issues/285) | - 🔜 GitLab CI/CD (https://github.com/Infisical/infisical/issues/134) + + ✔️ GitLab CI/CD + | 🔜 CircleCI (https://github.com/Infisical/infisical/issues/91) @@ -188,8 +190,8 @@ Nereden başlayacağınızdan emin değil misiniz? O zaman; 🔜 TravisCI | - - ✔️ Netlify + + ✔️ AWS Secrets Manager | @@ -201,7 +203,9 @@ Nereden başlayacağınızdan emin değil misiniz? O zaman; 🔜 Bitbucket | - 🔜 Supabase + + ✔️ AWS Parameter Store + | @@ -217,7 +221,9 @@ Nereden başlayacağınızdan emin değil misiniz? O zaman; 🔜 Serverless | - 🔜 AWS Lambda + + ✔️ Netlify + |