sobolevn/git-secret

Health v2 · maintenance only

Adoption not part of the score

4038 stars · 211 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

git-secret is a bash-based command-line tool that encrypts private files with GPG public keys and stores them safely inside a git repository. Trusted team members can decrypt the files with their personal secret keys, and access can be revoked by removing a key and re-encrypting.

Use cases

• store database passwords and API keys in a git repo encrypted
• share secrets with a team via git without a separate vault server
• version control secret configuration files alongside code
• revoke a teammate's access to encrypted repo files
• decrypt secrets during automated deployment with a private key

When to choose

• you want secrets versioned in git with full change history
• your team already uses GPG keys and prefers no extra infrastructure
• you need simple per-user access management via public keys

When to avoid

• you need centralized secret rotation, auditing, or dynamic secrets (use Vault or cloud KMS)
• your team cannot manage GPG key pairs
• you need to encrypt very large files or binaries frequently

Facets

cli-tool · maturity active

cryptography secrets-management security cli version-control security developer-tools version-control privacy windows cli cross-platform gpg git-addon encrypted-secrets shell-script pgp macos linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="sobolevn/git-secret")