by affinityworks


Blackbox Buildpack

This is a buildpack for decrypting arbitrary files with blackbox before running other heroku buildpacks. It allows you to place sensitive credentials under version control in encrypted format, then allow heroku to decrypt them at deploy time.



  • configure your app.json file such that this runs before your app is built
  • THEN: all config files encrypted locally with blackbox will be decrypted on heroku before your app is compiled on each deploy (yay!)


This buildpack makes a lot of assumptions about dependencies, but tries to provide useful errors if assumptions don't hold.

For examaple, it:


If you want to tinker, almost all of the action happens in bin/compile. Poke around!

For docs on Heroku's buildpack API, see: