shush
« Back to VersTracker
Description:
Encrypt and decrypt secrets using the AWS Key Management Service
Type: Formula  |  Tracked Since: Dec 28, 2025
Links: Homepage  |  formulae.brew.sh
Category: Security
Tags: encryption aws kms secrets cli security
Install: brew install shush
About:
Shush is a command-line utility that leverages AWS Key Management Service (KMS) to encrypt and decrypt secrets. It allows developers to securely store sensitive configuration data like API keys and passwords directly in version control. This simplifies secret management for infrastructure and application deployment without requiring external secret storage services.
Key Features:
  • Uses AWS KMS for secure encryption/decryption
  • Supports YAML and JSON file processing
  • Integrates with environment variables and shell scripts
  • Enables version-controlled secret storage
Use Cases:
  • Encrypting secrets for deployment pipelines
  • Managing API keys in shared codebases
  • Securely passing credentials to cloud infrastructure
Alternatives:
  • sops – SOPS supports multiple KMS providers and PGP, offering broader encryption options than Shush's AWS KMS focus.
  • git-crypt – git-crypt transparently encrypts files in git, whereas Shush encrypts specific values within configuration files.
Version History
Detected Version Rev Change Commit
Dec 4, 2024 6:09am 0 VERSION_BUMP 8c159f17
Dec 4, 2024 12:56am 0 VERSION_BUMP 9f35d488
Sep 14, 2024 6:33pm 0 VERSION_BUMP 1cdd6ac0