sobolevn/git-secret
Git Secret
git-secret is a command line tool and Bash encryption utility used to manage sensitive configuration files and passwords within Git repositories. It enables version controlled secret storage by encrypting files with GPG public keys, ensuring that sensitive data can be committed to a repository without exposing plaintext.
The tool utilizes a PGP encryption workflow to control access through a managed keyring of authorized public keys. This allows for the granting and revocation of decryption permissions for specific users. To prevent accidental data leaks, it automatically integrates with Git ignore lists to ensure unencrypted versions of tracked secrets are not committed.
The system provides capabilities for secret tracking, including listing encrypted files and performing on-the-fly decryption to compare differences between plaintext and encrypted versions without writing secrets to disk. It also includes utilities for initializing secure storage directories and configuring encryption settings.
Features
- Git Repository Secret Managers - Acts as a secret manager specifically designed to store and manage encrypted credentials within Git repositories.
- Version-Controlled Secret Encryption - Enables safe storage of encrypted secrets alongside source code in a version control system.
- Gitignore Integration - Automatically adds unencrypted secret files to git ignore lists to prevent accidental plaintext commits.
- Git-Integrated Secret Encryptions - Tracks and lists sensitive files encrypted within a Git repository.
- File Encryptions and Decryptions - Provides a utility for securing individual files through PGP encryption and decryption standards.
- Access-Based Key Management - Manages GPG keys to specifically control decryption permissions for repository secrets.
- Public-Key Access Control - Manages a local keyring of PGP public keys to control which identities can decrypt data.
- Decryption Access Revocation - Removes public keys from the keyring to prevent specific users from accessing encrypted secrets.
- Gitignore Automation - Automatically adds unencrypted secret files to the git ignore list to prevent accidental plaintext commits.
- PGP - Implements secret encryption utilizing OpenPGP keys for secure storage within repositories.
- Secret Restoration - Restores encrypted secrets to their original plaintext state using a private GPG key.
- Encrypted Difference Viewers - Provides the ability to visualize differences between encrypted files by decrypting them on the fly.
- On-the-Fly Decryption - Decrypts files into memory or streams to allow viewing and diffing without writing plaintext to disk.
- Secure Configuration Distribution - Enables sharing of encrypted environment variables and credentials across development teams.
- Local Secret Storage - Initializes secure local storage directories and ignore rules to prepare repositories for secrets.
- Plaintext-Encrypted Diffs - Allows users to visualize changes between plaintext secrets and their encrypted versions without writing to disk.
- Git Tools - Stores private data securely within a repository.
- Versionskontrolle - Encrypts files within git repositories.
- Secret Management - Bash utility for storing private data within Git repositories.
- Security & Privacy - Stores private data inside git repositories.
