You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
> **For Engineering Leaders**: Stop losing weeks to environment setup, secret management, and onboarding friction. Initiat transforms your developer experience from days of setup to minutes of productivity.
10
10
11
-
## The Problem: Developer Experience Debt
11
+
## The Problem
12
12
13
13
**Every engineering team faces the same productivity killers:**
14
14
@@ -20,100 +20,93 @@
20
20
21
21
**The Cost**: Lost productivity, frustrated developers, delayed releases, and security vulnerabilities.
Initiat solves these problems with three core capabilities:
26
26
27
-
Transform how your team handles secrets with enterprise-grade security. Our zero-knowledge architecture ensures that even we can't decrypt your secrets - everything is encrypted client-side before transmission.
27
+
### 🔐 Zero-Knowledge Secret Management
28
28
29
-
```bash
30
-
# Set a secret for your team (with project selection)
31
-
initiat secret set API_KEY --value "sk-1234567890abcdef"
32
-
# CLI will prompt: Select project (0 for custom): 1
29
+
Manage team secrets with enterprise-grade security. Secrets are encrypted on your device before transmission, and we can never decrypt them - even with full server access.
33
30
34
-
# Get a secret (decrypted client-side)
35
-
initiat secret get API_KEY
36
-
# CLI will prompt: Select project (0 for custom): 1
31
+
**Key Features:**
32
+
- Client-side encryption with Ed25519/X25519 cryptography
33
+
- Team-based access control with device approval workflows
34
+
- Audit trails for security and compliance
35
+
- Cross-platform CLI for macOS, Linux, and Windows
37
36
38
-
# List all secrets in a project
39
-
initiat secret list
40
-
# CLI will prompt: Select project (0 for custom): 1
initiat secret set API_KEY --value "sk-1234567890abcdef" --project-path acme-corp/production
44
-
```
39
+
### 🚀 Automated Environment Setup
45
40
46
-
-**Client-side encryption** with Ed25519/X25519 cryptography
47
-
-**Team-based access control** with device approval workflows
48
-
-**Audit trails** for security and compliance
49
-
-**Cross-platform CLI** for macOS, Linux, and Windows
41
+
Define your development environment in `.initiat/setup.yml` and let Initiat handle the rest. Works across macOS, Linux, and Windows with explicit, GitHub Actions-style commands.
- Explicit command-based setup (no magic, just clear commands)
45
+
- Cross-platform support with OS-specific conditions
46
+
- Idempotent operations (safe to run multiple times)
47
+
- Integrates with secret management for secure configuration
52
48
53
-
Streamline device and project management with granular control over who can access what. Every device must be approved, and every project can be configured with specific permissions.
We use industry-standard cryptographic primitives to ensure your secrets are protected at the highest level. Every operation is designed with security-first principles.
116
-
117
110
-**Ed25519 signatures** for device authentication
118
111
-**X25519 key exchange** for project key wrapping
119
112
-**XSalsa20Poly1305** for secret value encryption
@@ -122,93 +115,17 @@ We use industry-standard cryptographic primitives to ensure your secrets are pro
122
115
123
116
**Zero-Knowledge Architecture**
124
117
125
-
Our zero-knowledge architecture means we can't see your secrets, even if we wanted to. Everything is encrypted client-side before it ever reaches our servers.
126
-
127
118
- Client-side encryption before transmission
128
119
- Server cannot decrypt secrets or project keys
129
-
- Private keys stored in OS keychain (macOS Keychain, Windows Credential Manager, Linux Secret Service)
120
+
- Private keys stored in OS keychain
130
121
- Forward secrecy - compromising one device doesn't affect others
131
122
132
-
## Quick Start
133
-
134
-
**Secret Management**
135
-
136
-
Manage your team's secrets with enterprise-grade security. Every secret is encrypted client-side before transmission.
137
-
138
-
```bash
139
-
# Set a secret
140
-
initiat secret set API_KEY --value "sk-1234567890abcdef" --project-path acme-corp/production
141
-
142
-
# Get a secret
143
-
initiat secret get API_KEY --project-path acme-corp/production
144
-
145
-
# List all secrets
146
-
initiat secret list --project-path acme-corp/production
147
-
```
148
-
149
-
**Device Management**
150
-
151
-
Control access with device approval workflows. Every device must be registered and approved before it can access secrets.
152
-
153
-
```bash
154
-
# Register your device
155
-
initiat device register "my-laptop"
156
-
157
-
# Check pending approvals
158
-
initiat device approvals
159
-
160
-
# Approve all pending devices
161
-
initiat device approve --all
162
-
```
163
-
164
-
**Project Management**
165
-
166
-
Organize your secrets by team and project. Each project can have its own access controls and permissions.
167
-
168
-
```bash
169
-
# List available projects
170
-
initiat project list
171
-
172
-
# Initialize a new project (with interactive selection)
173
-
initiat project init
174
-
# CLI will prompt: Select project (0 for custom): 1
175
-
176
-
# Or specify project explicitly
177
-
initiat project init acme-corp/production
178
-
```
179
-
180
-
## Getting Started
181
-
182
-
### **Installation**
183
-
1.**Create account** at [initiat.dev](https://initiat.dev)
184
-
2.**Follow the setup instructions** at [initiat.dev](https://initiat.dev/docs/setup)
185
-
4.**Set up projects** for your teams and projects
186
-
5.**Configure device approval** workflows
187
-
188
-
### **For Teams**
189
-
1.**Evaluate** current secret management process
190
-
2.**Plan migration** from insecure channels (Slack, email, etc.)
191
-
3.**Train teams** on new workflows
192
-
4.**Monitor usage** and security improvements
193
-
194
-
## Documentation
195
-
196
-
### **Complete Guides**
197
-
-**[Setup Scripts](docs/SETUP_SCRIPTS.md)**: Complete documentation for `.initiat/setup.yml` setup scripts
# Run the setup script (installs dependencies, tools, etc.)
148
+
initiat setup run
240
149
241
-
# Run tests to ensure everything works
150
+
# Run tests
242
151
make ci
243
152
244
-
# Build and test the CLI
153
+
# Build the CLI
245
154
go build -o initiat .
246
-
./initiat --help
247
155
```
248
156
249
-
### **What We're Looking For**
250
-
-**Bug fixes** and improvements
251
-
-**New features** that align with our roadmap
252
-
-**Documentation** improvements
253
-
-**Security** enhancements
254
-
-**Performance** optimizations
157
+
**Learn more:** See [Setup Scripts Documentation](docs/SETUP_SCRIPTS.md) for the complete development environment setup.
255
158
256
159
## License
257
160
258
161
This project is licensed under the GNU Affero General Public License v3.0 (AGPL-3.0) - see the [LICENSE](LICENSE) file for details.
259
162
260
-
**Important**: This license allows you to use, modify, and distribute the software, but requires that any derivative works or network services using this software must also be open source under the same license. This protects the open source nature of the project while allowing commercial use of the web application.
163
+
**Important**: This license allows you to use, modify, and distribute the software, but requires that any derivative works or network services using this software must also be open source under the same license.
0 commit comments