You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Go to file

Josh Rabinowitz 7b00d81ea7 change to test CI		6 years ago
.Dockerfiles	Fixing issues with docker 17.07 ce and systemd	7 years ago
.ci	Updating ansible version installed by avm, same as kitchen	7 years ago
.github	Updated .github/ISSUE_TEMPLATE.md (optional)	7 years ago
man	ronn/man doc improvements	6 years ago
src	fix	6 years ago
tests	change to test CI	6 years ago
utils	remove extra newline	6 years ago
.editorconfig	fixes after makefile crash	8 years ago
.gitattributes	fixes after makefile crash	8 years ago
.gitignore	Updating ignore files	7 years ago
.kitchen.yml	Bump ansible to latest release	7 years ago
.travis.yml	Updating travis test matrix to reflect changes.	7 years ago
CHANGELOG.md	add git secret cat filename [filename2] feature.	6 years ago
CONTRIBUTING.md	Updated CONTRIBUTING.md (optional)	7 years ago
Gemfile	Add local ci tests.	7 years ago
LICENSE.md	CONTRIBUTING.md added	8 years ago
Makefile	Fix install-fpm target, typo in apk	7 years ago
README.md	small grammar change, update,	6 years ago
git-secret.plugin.zsh	Adds fixes to subdirectories bug.	7 years ago

README.md

Unescape Escape

git-secret

What is `git-secret`?

git-secret is a bash tool which stores private data inside a git repo. git-secret encrypts tracked files with public keys for all users whom you trust using gpg. Therefore, everyone has access to these tracked files using only their personal secret key. With git-secret changes to access rights is made easy and private-public key issues are avoided. Passwords do not needed changing with git-secret and when someone is out - just delete their public key, re-encrypt the files, and they won’t be able to decrypt secrets anymore.

Preview

Installation

git-secret supports brew, just type: brew install git-secret

It also supports apt and yum. You can also use make if you want to. See the installation section for the details.

Requirements

git-secret relies on several external packages:

bash since 3.2.57 (it is hard to tell the correct patch release)
gawk since 4.0.2
git since 1.8.3.1
gpg since gnupg 1.4 to gnupg 2.X
sha256sum since 8.21

Contributing

Do you want to help the project? Find an issue and send a PR. It is more than welcomed! See CONTRIBUTING.md on how to do that.

Security

In order to encrypt (git-secret hide -m) files only when modified, the path mappings file tracks sha256sum checksums of the files added (git-secret add) to git-secret's path mappings filesystem database. Although, the chances of encountering a sha collision are low, it is recommend that you pad files with random data for greater security. Or avoid using the -m option altogether. If your secret file holds more data than just a single password these precautions should not be necessary, but could be followed for greater security.

If you found any security related issues, please do not enclose it in public. Send an email to security@wemake.services