ejson and ejson2env are used to manage access tokens and other secrets required for CI.

Setup

$ sudo gem install ejson ejson2env

then obtain the necessary keypair and place it in /opt/ejson/keys/.

Usage

Run the following command to decrypt the secrets into the environment:

eval $(ejson2env secrets.ejson)

Managing secrets.ejson

To decrypt secrets.ejson for modification, run:

$ ejson decrypt secrets.ejson -o secrets_unencrypted.ejson

Edit, then run the following to re-encrypt the file BEFORE COMMITING YOUR CHANGES:

$ ejson encrypt secrets_unencrypted.ejson
$ mv secrets_unencrypted.ejson secrets.ejson