:busts_in_silhouette: A bash-tool to store your private data inside a git repository.
git-secretis a bash tool which stores private data inside a git repo.
git-secretencrypts files with permitted users' public keys, allowing users you trust to access encrypted data using pgp and their secret keys.
git-secret, changes to access rights are simplified, and private-public key issues are handled for you.
When someone's permission is revoked, secrets do not need to be changed with
git-secret- just remove their key from the keychain using
git secret killperson [email protected], re-encrypt the files, and they won't be able to decrypt secrets anymore. If you think the user might have copied the secrets or keys when they had access, then you should also change the secrets.
brew, just type:
brew install git-secret
It also supports
yum. You can also use
makeif you want to. See the installation section for the details.
git-secretrelies on several external packages:
3.2.57(it is hard to tell the correct
8.21(on freebsd and MacOS
shasumis used instead)
In order to encrypt (git-secret hide -m) files only when modified, the path mappings file tracks sha256sum checksums of the files added (git-secret add) to git-secret's path mappings filesystem database. Although, the chances of encountering a sha collision are low, it is recommend that you pad files with random data for greater security. Or avoid using the
-moption altogether. If your secret file holds more data than just a single password these precautions should not be necessary, but could be followed for greater security.
If you found any security related issues, please do not disclose it in public. Send an email to
git-secretuses semver. See CHANGELOG.md.
Thanks also to all the people and groups who package git-secret to be easier to install on particular OSes or distributions!
Here are some packagings of git-secret that we're aware of:
Such packages are considered 'downstream' because the git-secret code 'flows' from the git-secret repository to the various rpm/deb/dpkg/etc packages that are created for specific OSes and distributions.
We have also added notes specifically for packagers in CONTRIBUTING.md.
Support this project by becoming a sponsor. Your logo will show up here with a link to your website. [Become a sponsor]
Thanks to all our backers!
This project exists thanks to all the people who contribute. [Contribute].
MIT. See LICENSE.md for details.