AGWA/git-crypt
Git Crypt
git-crypt is a transparent cryptography layer and secret manager for Git repositories. It encrypts specific files so they remain as ciphertext on remote servers while appearing as plaintext in local directories.
The tool uses Git attributes to define the scope of files and directories targeted for encryption. It supports both symmetric secret key encryption for shared access and asymmetric public key encryption to control decryption permissions among multiple collaborators.
The system automates the encryption and decryption process through hook-based filters that trigger during commit and checkout events. These mechanisms ensure that sensitive configuration files and credentials are kept within version control without being exposed in plaintext in remote stores.
Features
- GitOps Secret Management - Manages encrypted secrets within Git repositories to prevent plaintext exposure in remote stores.
- Automation and Workflow Hooks - Automates encryption and decryption by triggering filters during Git commit and checkout events.
- Transparent Encryption Tooling - Encrypts specific files in a Git repository so they remain ciphertext on remote servers and plaintext locally.
- Encryption Attribute Mapping - Implements a system where Git attributes define the scope of files automatically encrypted during commit.
- Cryptography Wrappers - Provides a transparent cryptography layer ensuring sensitive files are never pushed to remote stores in plaintext.
- Transparent Encryption Wrappers - Automatically encrypts files during commit and decrypts them during checkout for a seamless workflow.
- Encryption Key Management - Controls repository access through the management of shared symmetric secrets and individual public keys.
- Asymmetric Encryption - Provides asymmetric public key encryption to control decryption permissions among multiple collaborators.
- Encryption Scope Definitions - Uses Git attributes and wildcard patterns to specify exactly which files and directories require encryption.
- Git File Encryption - Secures sensitive data during commit and restores it during checkout to maintain encrypted files within the repository.
- Git Repository Secret Managers - Serves as a secret manager for Git repositories using both symmetric and asymmetric encryption.
- Symmetric Encryption - Supports securing files using a single shared symmetric secret key for both encryption and decryption.
- Version-Controlled Secret Encryption - Keeps encrypted secrets and public source code in a single repository while restricting read access to authorized users.
- Encryption Scope Configuration - Allows users to specify which files or directories require encryption using attribute files and wildcard patterns.
- Ciphertext Mapping - Swaps plaintext file contents with ciphertext blocks while maintaining original file names and directory structures.
- Remote Ciphertext Enforcement - Ensures specific files remain as ciphertext in remote storage while appearing as plaintext in local directories.
- Encrypted Repository Sharing - Enables secure collaboration by sharing encrypted files via public key infrastructure to control decryption access.
- GitHub Ecosystem Projects - Tool for transparent encryption of Git files.
- Secret Management - Transparent file encryption integrated directly into Git repositories.
- Security & Privacy - Transparent file encryption in git
