websafe/helpers-secrets

Secret resolution helper for PHP (env → ./secrets → /run/secrets → default).

v0.1.3 2025-09-04 20:42 UTC

Requires

• php: >=8.1

Requires (Dev)

• friendsofphp/php-cs-fixer: ^3.64
• phpunit/phpunit: ^10.5 || ^11.0
• squizlabs/php_codesniffer: ^3.10

MIT

• Thomas Szteliga

README

Tiny helper for reading secrets in PHP projects, with a portable resolution order:

1. Environment variable (CI/CD, Docker, systemd, shell, .env via Dotenv)
2. Local dev file: ./secrets/NAME
3. Container file: /run/secrets/NAME (Docker/Swarm/Kubernetes)
4. Default value

Install

composer require websafe/helpers-secrets

Use

<?php
require __DIR__ . '/vendor/autoload.php';

use function Websafe\Helpers\secret;

$api = secret('API_TOKEN', true);
$pwd = secret('DB_PASSWORD', true);
$lv  = secret('LOG_LEVEL', false, 'info');