Cross-Platform Kotlin Multiplatform App for Centralized GitHub Secrets Management
GitHub Secrets Manager is a powerful, secure, and developer-friendly tool designed to help individuals and organizations manage sensitive configuration (like API keys, tokens, and credentials) across multiple GitHub repositories with ease and confidence.
Built with Kotlin Multiplatform, it delivers a unified experience on Android, iOS, Windows, macOS, and Linux.
Managing secrets across many GitHub repositories is often:
- ❌ Manual and error-prone
- ❌ Lacking visibility across teams
- ❌ Risky when rotating credentials
- ❌ Inefficient for growing organizations
GitHub Secrets Manager solves these challenges by centralizing secrets workflows and enabling secure, batch-based, organization-wide operations.
- OAuth login with GitHub
- Access scoped repositories with appropriate permissions
- Secure session handling
- Personal and organizational repo browser
- Group and favorite frequently used repos
- Filter and tag repositories
- View, create, update, and delete secrets
- Masked values with audit metadata
- Secure copy between repositories
- Metadata filtering and search
- Create reusable secret templates
- Inherit from organization-level secrets
- Multi-repo updates from one central config
- Preview changes before applying
- Update secrets across multiple repos in one go
- Progress tracking and error reporting
- No persistent local storage of secrets
- Session timeouts and masked input
- Secure by design with audit-awareness
- Mobile apps (Android & iOS) for emergency updates
- Desktop apps (Windows/macOS/Linux) for full functionality
- Offline viewing of cached repo metadata
| Scenario | What It Solves |
|---|---|
| Onboard New Repository | Quickly copy secrets from existing repos |
| Rotate API Credentials | Batch update credentials across 10+ repos |
| Audit Secret Governance | Full visibility into credential usage |
| Organization-Level Templates | Enforce standard secrets globally |
| Mobile Emergency Patching | Rotate leaked credentials from mobile |
- 🧑💻 Developers managing personal or team projects
- ⚙️ DevOps Engineers handling CI/CD secrets
- 🔐 Security Teams auditing and rotating credentials
- 🧠 Org Admins deploying standard secrets templates
- 🔒 Strengthen secrets security hygiene
- ⏱ Save time through automation and batch operations
- 👁 Increase visibility and auditability
- 📉 Minimize risks of human error or stale credentials
- 🧘♂️ Let developers focus on code, not configuration
- Kotlin Multiplatform (KMP)
- Jetpack Compose Multiplatform (UI)
- Ktor (Networking)
- GitHub REST API / GraphQL API
- Secure local state (encrypted preferences / storage)
- GitHub Apps Integration
- Secret Versioning
- CI/CD integrations (e.g., GitHub Actions sync)
- Role-based access and team policies
- Exportable audit logs
- Vault / AWS Secrets Manager bridges
-
Clone this repo
git clone https://github.com/MobileByteLabs/mbl-gh-secrets-manager.git
-
Install dependencies
Run the build script for your platform (KMP setup) -
Authenticate with GitHub
Follow the OAuth flow inside the app -
Start managing your secrets securely
Use the dashboard to view, copy, and update secrets across repos
This project is open source under the MIT License.
Join our Slack: MobileByteLabs Slack
For support, ideas, or bugs → open an Issue
Made with ❤️ by the team at MobileByteLabs
Empowering developers and DevOps teams to manage secrets like pros 🔐⚡