Get started
The toolchain covers the three recurring jobs of running your own software fleet:
- Keep secrets out of the repo — skret wraps cloud secret managers (AWS SSM Parameter Store today) with a developer-first CLI.
- Release safely — better-semantic-release (bsr) is a drop-in fork of python-semantic-release with built-in release-safety guards and a signed action-pin registry.
- Back up and restore — better-drive is a cross-platform Google Drive sync and virtual-drive mount built on rclone.
The typical loop
Section titled “The typical loop”- Developers read secrets with
skret get/skret env; CI reads them via OIDC instead of long-lived keys. - Merges to
mainare released by the bsr GitHub Action: version bump, tag, changelog and release assets — beta first, stable when you say so. - Machines back up through better-drive jobs with
.driveignorefilters; restores are pull-based from the same encrypted remotes.
Where to go next
Section titled “Where to go next”- Install each tool: skret install, bsr usage, better-drive install.
- Understand the supply-chain model behind bsr action pins: Action-pin registry.