compare
dotenvx vs Sealed Secrets
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | dotenvx | Sealed Secrets |
|---|---|---|
| Language | JavaScript | Go |
| Licence | BSD-3-Clause | Apache-2.0 |
| Stars | 5.8k | 9.3k |
| Latest | v2.33.0 | v0.40.0 |
| Last push | 2026-10-06 | 2026-10-01 |
| Release cadence | about 1 day between releases | about 1 day between releases |
| Active contributors | 4+ commit authors on the default branch in the last 90 days | 9 commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
Both replace SOPS. Alternatives to SOPS →
PartialdotenvxEncrypts the values in .env files with a public key and decrypts them when the process starts; env files only.
PartialSealed SecretsKubernetes Secrets only, encrypted against a key held by the cluster controller and decrypted there.
dotenvx
Sealed Secrets
- helm-v2.20.02026-09-10Helm chart for the sealed-secrets controller.
- v0.40.02026-09-10sealed-secrets-v0.40.0
- helm-v2.19.32026-08-20Helm chart for the sealed-secrets controller.
- v0.39.12026-08-20sealed-secrets-v0.39.1
- helm-v2.19.22026-08-18Helm chart for the sealed-secrets controller.
dotenvx
unsigned The latest release, v2.33.0, carries no signature GitHub could verify.
Loading the security report
Sealed Secrets
✓ signed The latest release, v0.40.0, carries a signature GitHub verified.
Loading the security report