diff --git a/README.md b/README.md index b8c242672..a24d18d7f 100644 --- a/README.md +++ b/README.md @@ -3,7 +3,7 @@ infisical

-

Open-source, end-to-end encrypted tool to manage secrets and configs across your team, devices, and infrastructure.

+

Open-source, end-to-end encrypted platform to manage secrets and configs across your team and infrastructure.

@@ -48,322 +48,89 @@ [Italian language](i18n/README.it.md) [Hindi language](i18n/README.hi.md) -**[Infisical](https://infisical.com)** is an open source, end-to-end encrypted secret manager which you can use to centralize your API keys and configs. From Infisical, you can then distribute these secrets across your whole development lifecycle - from development to production . It's designed to be simple and take minutes to get going. +## Introduction -- **[User-Friendly Dashboard](https://infisical.com/docs/getting-started/dashboard/project)** to manage your team's secrets and configs within projects -- **[Language-Agnostic CLI](https://infisical.com/docs/cli/overview)** that pulls and injects esecrets and configs into your local workflow +**[Infisical](https://infisical.com)** is an open source, end-to-end encrypted secret management platform that teams use to centralize their secrets like API keys, database credentials, and configurations. + +We're on a mission to make secret management more accessible to everyone, not just security teams, and that means redesigning the entire developer experience from ground up. + +## Features + +- **[User-friendly dashboard](https://infisical.com/docs/getting-started/dashboard/project)** to manage secrets across projects and environments (e.g. development, production, etc.) +- **[Client SDKs](https://infisical.com/docs/sdks/overview)** to fetch secrets for your apps and infrastructure on demand +- **[Infisical CLI](https://infisical.com/docs/cli/overview)** to fetch and inject secrets into any framework in local development +- **[Native integrations](https://infisical.com/docs/integrations/overview)** with platforms like GitHub, Vercel, Netlify, and more +- [**Automatic Kubernetes deployment secret reloads**]() - **[Complete control over your data](https://infisical.com/docs/self-hosting/overview)** - host it yourself on any infrastructure -- **Navigate Multiple Environments** per project (e.g. development, staging, production, etc.) -- **Personal overrides** for secrets and configs -- **[Integrations](https://infisical.com/docs/integrations/overview)** with CI/CD and production infrastructure -- **[Infisical API](https://infisical.com/docs/api-reference/overview/introduction)** - manage secrets via HTTPS requests to the platform -- **[Secret Versioning](https://infisical.com/docs/getting-started/dashboard/versioning)** to view the change history for any secret -- **[Audit Logs](https://infisical.com/docs/getting-started/dashboard/audit-logs)** to record every action taken in a project -- **[Point-in-time Secrets Recovery](https://infisical.com/docs/getting-started/dashboard/pit-recovery)** for rolling back to any snapshot of your secrets +- **[Secret versioning](https://infisical.com/docs/getting-started/dashboard/versioning)** and **[Point-in-Time Recovery]()** to version every secret and project state +- **[Audit logs](https://infisical.com/docs/getting-started/dashboard/audit-logs)** to record every action taken in a project - **Role-based Access Controls** per environment -- **2FA** (more options coming soon) -- **Smart Security Alerts** -- [**1-Click Deploy** to AWS and Digital Ocean](https://infisical.com/docs/self-hosting/overview) -- 🔜 **Automatic Secret Rotation** -- 🔜 **Slack & MS Teams** integrations +- [**Simple on-premise deployments** to AWS and Digital Ocean](https://infisical.com/docs/self-hosting/overview) +- [**2FA**](https://infisical.com/docs/getting-started/dashboard/mfa) with more options coming soon -And more. +And much more. -## 🚀 Get started +## Getting started -To quickly get started, visit our [get started guide](https://infisical.com/docs/getting-started/introduction). +| Check out the [Quickstarts](https://infisical.com/docs/getting-started/introduction) Guide -

- - -

+### Use Infisical Cloud -## 🔥 What's cool about this? +The fastest and most reliable way to get started with Infisical is signing up for free to [Infisical Cloud](https://app.infisical.com/login). -Infisical makes secret management simple and end-to-end encrypted by default. We're on a mission to make it more accessible to all developers, not just security teams. +### Deploy Infisical on premise -According to a [report](https://www.ekransystem.com/en/blog/secrets-management), only 10% of organizations use secret management solutions despite all using digital secrets to some extent. +Deployment options: [AWS EC2](https://infisical.com/docs/self-hosting/overview), [Kubernetes](https://infisical.com/docs/self-hosting/overview), and [more](https://infisical.com/docs/self-hosting/overview). -If you care about efficiency and security, then Infisical is right for you. +### Run Infisical locally -We are currently working hard to make Infisical more extensive. Need any integrations or want a new feature? Feel free to [create an issue](https://github.com/Infisical/infisical/issues) or [contribute](https://infisical.com/docs/contributing/overview) directly to the repository. +To set up and run Infisical locally, make sure you have Git and Docker installed on your system. Then run the command for your system: -## 🔌 Integrations +Linux/macOS: -We're currently setting the foundation and building [integrations](https://infisical.com/docs/integrations/overview) so secrets can be synced everywhere. Any help is welcome! :) +```console +git clone https://github.com/Infisical/infisical && cd "$(basename $_ .git)" && cp .env.example .env && docker-compose -f docker-compose.dev.yml up --build +``` - - - - - - - - - -
Platforms Frameworks
+Windows Command Prompt: - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- - ✔️ Docker - - - - ✔️ Docker Compose - - - - ✔️ Heroku - -
- - ✔️ Vercel - - - - ✔️ Kubernetes - - - - ✔️ Fly.io - -
- - ✔️ Supabase - - - - ✔️ GitHub Actions - - - - ✔️ Railway - -
- 🔜 GCP SM (https://github.com/Infisical/infisical/issues/285) - - - ✔️ GitLab CI/CD - - - - ✔️ CircleCI - -
- 🔜 Jenkins - - 🔜 Digital Ocean - - - ✔️ Azure Key Vault - -
- - ✔️ Travis CI - - - - ✔️ AWS Secrets Manager - - - 🔜 Forge -
- 🔜 Bitbucket - - - ✔️ AWS Parameter Store - - - - ✔️ Render - -
- 🔜 BuddyCI - - 🔜 Serverless - - - ✔️ Netlify - -
+```console +git clone https://github.com/Infisical/infisical && cd infisical && copy .env.example .env && docker-compose -f docker-compose.dev.yml up --build +``` - 		- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- - ✔️ React - - - - ✔️ Express - -
- - ✔️ Gatsby - - - - ✔️ Flask - -
- - ✔️ Django - - - - ✔️ Laravel - -
- - ✔️ NestJS - - - - ✔️ Remix - -
- - ✔️ Next.js - - - - ✔️ Vite - -
- - ✔️ Vue - - - - ✔️ Ruby on Rails - -
- - ✔️ Fiber - - - - ✔️ Nuxt - -
- - ✔️ .NET - - - And more... -
+## Open-source vs. paid -
+This repo available under the [MIT expat license](https://github.com/Infisical/infisical/blob/main/LICENSE), with the exception of the `ee` directory which will contain premium enterprise features requiring a Infisical license in the future. -## 💚 Community & Support +## Security -- [Slack](https://join.slack.com/t/infisical-users/shared_invite/zt-1kdbk07ro-RtoyEt_9E~fyzGo_xQYP6g) (For live discussion with the community and the Infisical team) -- [GitHub Discussions](https://github.com/Infisical/infisical/discussions) (For help with building and deeper conversations about features) -- [GitHub Issues](https://github.com/Infisical/infisical-cli/issues) (For any bugs and errors you encounter using Infisical) -- [Twitter](https://twitter.com/infisical) (Get news fast) +Please do not file GitHub issues or post on our public forum for security vulnerabilities, as they are public! -## 🏘 Open-source vs. paid +Infisical takes security issues very seriously. If you have any concerns about Infisical or believe you have uncovered a vulnerability, please get in touch via the e-mail address security@infisical.com. In the message, try to provide a description of the issue and ideally a way of reproducing it. The security team will get back to you as soon as possible. -This repo is entirely MIT licensed, with the exception of the `ee` directory which will contain premium enterprise features requiring a Infisical license in the future. We're currently focused on developing non-enterprise offerings first that should suit most use cases. +Note that this security address should be used only for undisclosed vulnerabilities. Please report any security problems to us before disclosing it publicly. -## 🛡 Security +## Contributing -Looking to report a security vulnerability? Please don't post about it in GitHub issue. Instead, refer to our [SECURITY.md](./SECURITY.md) file. - -## 🚨 Stay Up-to-Date - -Infisical officially launched as v.1.0 on November 21st, 2022. There are a lot of new features coming very frequently. Watch **releases** of this repository to be notified about future updates: - -![infisical-star-github](https://github.com/Infisical/infisical/blob/main/.github/images/star-infisical.gif?raw=true) - -## 🌱 Contributing - -Whether it's big or small, we love contributions ❤️ Check out our guide to see how to [get started](https://infisical.com/docs/contributing/overview). +Whether it's big or small, we love contributions. Check out our guide to see how to [get started](https://infisical.com/docs/contributing/overview). Not sure where to get started? You can: - [Book a free, non-pressure pairing sessions with one of our teammates](mailto:tony@infisical.com?subject=Pairing%20session&body=I'd%20like%20to%20do%20a%20pairing%20session!)! - Join our Slack, and ask us any questions there. -## 🦸 Contributors +## Resources + +- [Docs](https://infisical.com/docs/getting-started/introduction) for comprehensive documentation and guides +- [Slack](https://join.slack.com/t/infisical-users/shared_invite/zt-1kdbk07ro-RtoyEt_9E~fyzGo_xQYP6g) for discussion with the community and Infisical team. +- [GitHub](https://github.com/Infisical/infisical) for code, issues, and pull requests +- [Twitter](https://twitter.com/infisical) for fast news +- [YouTube](https://www.youtube.com/@infisical5306) for videos on secret management +- [Blog](https://infisical.com/blog) for secret management insights, articles, tutorials, and updates +- [Roadmap](https://www.notion.so/infisical/be2d2585a6694e40889b03aef96ea36b?v=5b19a8127d1a4060b54769567a8785fa) for planned features + +## Acknowledgements [//]: contributor-faces @@ -373,8 +140,3 @@ Not sure where to get started? You can: -## 🌎 Translations - -Infisical is currently available in English, Korean, French, and Portuguese (Brazil). Help us translate Infisical to your language! - -You can find all the info in [this issue](https://github.com/Infisical/infisical/issues/181). diff --git a/SECURITY.md b/SECURITY.md index bc383f109..debde5ba8 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -1,9 +1,13 @@ # Security Policy -## Supported Versions +## Supported versions We always recommend using the latest version of Infisical to ensure you get all security updates. -## Reporting a Vulnerability +## Reporting vulnerabilities -Please report security vulnerabilities or concerns to team@infisical.com. +Please do not file GitHub issues or post on our public forum for security vulnerabilities, as they are public! + +Infisical takes security issues very seriously. If you have any concerns about Infisical or believe you have uncovered a vulnerability, please get in touch via the e-mail address security@infisical.com. In the message, try to provide a description of the issue and ideally a way of reproducing it. The security team will get back to you as soon as possible. + +Note that this security address should be used only for undisclosed vulnerabilities. Please report any security problems to us before disclosing it publicly. \ No newline at end of file