StackExchange/blackboxArchived

Features

• Version-Controlled Secret Encryption - Encrypts sensitive files with GPG to safely store and share them within Git or other version control systems.
• Version-Control Transparent Decryption - Intercepts version control diff and log operations to decrypt encrypted files for plaintext visualization.
• Secrets Deployment Pipelines - Automatically decrypts configuration secrets using GPG keys during deployment and CI pipelines.
• Non-Interactive Decryption - Utilizes passphrase-less GPG subkeys to enable non-interactive secret retrieval within automated CI and deployment pipelines.
• Secret Re-encryptions - Provides mechanisms to re-encrypt secrets when team membership changes to ensure only current members have access.
• Encryption Key Management - Associates specific GPG public keys with authorized administrators to manage secret encryption and decryption.
• Asymmetric Encryption - Uses asymmetric GPG public keys to allow multiple authorized recipients to decrypt the same secret.
• GPG-Based Encryption - Uses GnuPG public key cryptography to secure files at rest for multiple authorized recipients.
• GPG Key Management - Integrates GPG keys into a shared keyring for use by authorized users and automated deployment systems.
• Access-Based Key Management - Manages which team members or machines can decrypt secrets by controlling access to GPG keys.
• GPG Key-Based - Manages which users can decrypt files using individual GPG keys without relying on shared passwords.
• Passwordless Decryption - Enables non-interactive secret retrieval in CI pipelines by creating GPG subkeys without passphrases.
• Public-Key Access Control - Manages secret access by associating specific GPG public keys with authorized users or machine roles.
• Access Control - Implements access control by managing authorized GPG public keys to determine who can decrypt sensitive files.
• Secure Content Editing - Allows users to edit encrypted secrets in plaintext and automatically re-encrypts them once the editor closes.
• Decrypted Diff Visualizations - Provides a utility to decrypt files during version control diff and log operations to track plaintext changes.
• Local Secret Decryption - Provides utilities to extract and decrypt secret files locally for manual editing or deployment purposes.
• Decryption Utilities - Provides functionality to decrypt encrypted files for viewing or batch processing during deployment.
• Ephemeral Plaintext Handling - Implements a secure editing workflow that decrypts files to temporary storage and automatically shreds the plaintext after use.
• Plaintext Shredding - Ships a utility that wipes all decrypted files from the local system to prevent accidental secret exposure.
• GitOps Secret Management - Provides a system for encrypting sensitive files with GPG for safe storage and collaboration within version control.
• Asymmetric Secret Wrappers - Provides a utility that manages public key encryption and decryption for team-based secret sharing.
• Configuration Decryption - Enables the decryption of configuration secrets specifically for use within production environments.
• Secure Runtime Configuration - Manages encrypted settings that are decrypted on the fly for use by configuration tools on production servers.
• User Access Revocation - Provides a process to revoke a user's access by removing their key and re-encrypting the data.
• Modification Auditing - Allows tracking modifications to sensitive data by comparing decrypted files against their encrypted state.
• DevSecOps And Hardening - Encrypts secrets at rest within version control systems.
• Secret Management - Tool for storing secrets in version control securely.
• Secrets Management - Encrypts credentials directly within your version control repository.
• Security And Privacy - Securely store and encrypt secrets within version control.
• Security & Privacy - Securely stores keys and credentials in git.

Star history