elasticdog/transcrypt

Health v2 · maintenance only

Adoption not part of the score

1708 stars · 120 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A single Bash script that configures transparent encryption of sensitive files in a Git repository using Git's clean/smudge filters and OpenSSL symmetric ciphers. Files are encrypted on commit and decrypted on checkout, so secrets can be stored in remotes without exposing them to people without the password.

Use cases

• store passwords and private keys in a git repository safely
• encrypt sensitive files before pushing to github or dropbox
• transparently decrypt files on checkout in a git repo
• share a repo with encrypted secrets while teammates commit to unencrypted files
• rekey encrypted files in a git repository
• list which files are encrypted in a git repo

When to choose

• you want a dependency-light, single-script alternative to git-crypt
• you need per-file unique salts and OpenSSL-based symmetric encryption
• you want encryption configured once without the tool needing to stay installed
• you need to set up additional clones or rotate keys easily

When to avoid

• you need asymmetric encryption or per-user access control
• you want full-disk or whole-repo encryption rather than selected files
• you need a GUI or non-technical user workflow
• your environment lacks Bash, Git, and OpenSSL

Facets

cli-tool · maturity stable

cryptography security secrets-management version-control developer-tools security version-control developer-tools privacy cli cross-platform git encryption gitattributes clean-smudge-filters openssl shell-script secrets-in-repo linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="elasticdog/transcrypt")