FAQ
Frequently asked questions
Short answers to the questions people ask first.
Can the viewer show me a secret value?
No. No value is stored. The database holds 12-character fingerprints, and the viewer sends only key names and key states to the browser.
Does it fix drift?
No. It only runs env-sync diff. Fixing drift is a separate env-sync step you run.
Is there a hosted version?
No. You run the collector, the database and the viewer yourself. There is no sign-up here.
How do I get the code?
The repository and env-sync are private. Ask for access through the contact form.
Which platforms are compared?
CapRover and Vercel. Services with Render, SSM or GitHub Actions targets are dropped in pre-flight, and dotenv targets are always refused.
Why is a target stale when its keys match?
Stale means no ok snapshot within STALE_AFTER_HOURS. Its last known keys can still match; the point is that nothing has confirmed them recently.
Can I run the collector on a shared self-hosted runner?
It is not meant to be: it holds a 1Password service account that can read plaintext. Use a dedicated CI environment with branch protection and code-owner review.
Still stuck? Contact us.