Porting env-sync, and the safety net it never had
· 2 min read
env-sync started as a set of scripts inside a skills repo. They pushed 1Password secrets to six platforms, and they did it well. They had one gap: nothing stopped a push to production that you did not mean to run.