Phase

Phase is a secrets platform for engineering teams that ship often, covering application secrets and environment variables from a developer laptop through to production. It removes the drift that appears once the same credential lives in a dotenv file, a CI settings page, and a cloud console at the same time.

This repository holds the Phase Console, the dashboard where secrets are created, rotated, diffed, and restored. Around it sit separate repositories for the CLI, the Node, Python, and Go SDKs, a Helm chart, a Kubernetes operator, and a Terraform provider, all documented in one place.

The pieces fit together around a handful of capabilities.

• Runtime injection: the CLI imports existing dotenv files and injects secrets into a process at runtime or into a virtual shell.
• Access control: role-based, cryptographic permissions apply per application and per environment.
• Secret sync: values push automatically to GitHub, GitLab CI, Vercel, Cloudflare Pages, Railway, and AWS Secrets Manager.
• Kubernetes and Terraform: the operator syncs secrets into a cluster and reloads deployments, while the provider covers infrastructure as code workflows.
• Referencing and overrides: personal secrets stay private to one developer, and values reference each other across apps and environments.
• Audit logs: every change and access event is recorded, with version history and one-click restore of an older value.

A REST API covers whatever the SDKs do not. Start on the hosted console for the quickest path, or run the whole platform on your own infrastructure using the documented self-hosting route.