Get started
The toolchain covers the three recurring jobs of running your own software fleet:
Keep secrets out of the reposkret wraps cloud secret managers (AWS SSM Parameter Store today) with a developer-first CLI.
Release safelybetter-semantic-release (bsr) is a drop-in fork of python-semantic-release with built-in release-safety guards.
Back up and restore (Archived)better-drive was a cross-platform Google Drive sync and virtual-drive mount built on rclone.
The typical loop
Section titled “The typical loop”Read secretsDevelopers read secrets with skret get / skret env; CI reads them via OIDC instead of long-lived keys.
Release safelyMerges to main are released by the bsr GitHub Action: version bump, tag, changelog and release assets — beta first, stable when you say so.
Back up and restore (Archived)Machines backed up through better-drive jobs with .driveignore filters; restores are pull-based from the same encrypted remotes. better-drive is archived — use rclone directly for new setups.
Where to go next
Section titled “Where to go next”skret installInstall the secret manager CLI
bsr usageLearn how to use better-semantic-release
Action-pin registryUnderstand the supply-chain model behind bsr action pins