Free and open source · v1.0

Your whole .env,
in GitHub Secrets.

SecretDrop is a Chrome extension that uploads every value in a .env file to GitHub Actions Secrets in one click. No CLI, no API token, no setup.

github.com/acme/app/settings/secrets/actions
Bulk upload .env
.env.productionDrop your .env file here
DATABASE_URLpostgres://••••••
API_KEYsk-••••••••
JWT_SECRET••••••••••
3 of 3 secrets uploaded
How it works

Four steps, one click.

  1. 1

    Open your repo’s secrets

    Go to Settings → Secrets and variables → Actions on any GitHub repository.

  2. 2

    Click Bulk Upload .env

    SecretDrop adds a button in the bottom-right corner of the page.

  3. 3

    Drop the file or paste it

    Drop your .env file or paste its contents. Values are shown masked.

  4. 4

    Upload all

    Review the preview and upload every secret in one click.

.env format

Reads the files you already have.

Quoted values and multi-line keys work as they are.

Keys become UPPERCASE

database_url is uploaded as DATABASE_URL, the way Actions expects it.

Reserved keys are skipped

Anything starting with GITHUB_ is reserved by GitHub and left out.

Existing secrets are safe

Secrets that already exist are skipped by default, or overwritten if you choose to.

Runs offline

Parsing and encryption happen in your browser. Nothing is sent anywhere else.

.env.production
DATABASE_URL=postgres://localhost/mydb
API_KEY="my-secret"
PRIVATE_KEY="-----BEGIN RSA PRIVATE KEY-----
MIIEowIBAAKCAQEA...
-----END RSA PRIVATE KEY-----"

Stop pasting secrets one by one.

Install from source today. Prefer the terminal? EnvSeeder does the same from the CLI.