ironclad

https://github.com/jclusso/ironclad

Ironclad sources Rails credential keys from 1Password and caches them in the local OS keystore (macOS Keychain or the Linux kernel keyring), so no key files live on disk. Ships a CLI, a Railtie that loads the development key at boot, Capistrano helpers, and an install generator.