You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Go to file

Josh Rabinowitz 94d5ae43d1 bump version to 0.2.5 (#297 )		5 years ago
.Dockerfiles	Fixing issues with docker 17.07 ce and systemd	7 years ago
.ci	travis-ci changes: remove ansible v2.3, fix brew build issue	5 years ago
.github	PR template: new branches should be from master (#299 )	5 years ago
RFC	final final, finally	6 years ago
man	WIP: test with expired key, add 'whoknows -l' (#287 )	6 years ago
src	bump version to 0.2.5 (#297 )	5 years ago
tests	Fixes for 'changes' and trailing newlines, for #291 (#293 )	5 years ago
utils	support FreeBSD (#260 )	6 years ago
.editorconfig	fixes after makefile crash	8 years ago
.gitattributes	fixes after makefile crash	8 years ago
.gitignore	Updating ignore files	7 years ago
.kitchen.yml	Disable gnupg-git test on debian strech, gpg >=2.2.12 requires libassuan	5 years ago
.travis.yml	Disable gnupg-git test on debian strech, gpg >=2.2.12 requires libassuan	5 years ago
CHANGELOG.md	bump version to 0.2.5 (#297 )	5 years ago
CONTRIBUTING.md	added notes about packages and for package maintainers (#301 )	5 years ago
Gemfile	Add local ci tests.	7 years ago
LICENSE.md	CONTRIBUTING.md added	8 years ago
Makefile	WIP: Force mode for hide and reveal (#263 )	6 years ago
README.md	added notes about packages and for package maintainers (#301 )	5 years ago
git-secret.plugin.zsh	Adds fixes to subdirectories bug.	7 years ago

README.md

git-secret

What is `git-secret`?

git-secret is a bash tool which stores private data inside a git repo. git-secret encrypts tracked files with public keys for users whom you trust using gpg, allowing permitted users to access encrypted data using their secret keys. With git-secret, changes to access rights are made easy and private-public key issues are handled for you. Passwords do not need to be changed with git-secret when someone's permission is revoked - just remove their key from the keychain using git secret killperson their@email.com, and re-encrypt the files, and they won't be able to decrypt secrets anymore.

Preview

Installation

git-secret supports brew, just type: brew install git-secret

It also supports apt and yum. You can also use make if you want to. See the installation section for the details.

Requirements

git-secret relies on several external packages:

bash since 3.2.57 (it is hard to tell the correct patch release)
gawk since 4.0.2
git since 1.8.3.1
gpg since gnupg 1.4 to gnupg 2.X
sha256sum since 8.21 (on freebsd and OSX shasum is used instead)

Contributing

Do you want to help the project? Find an issue and send a PR. It is more than welcomed! See CONTRIBUTING.md on how to do that.

Security

In order to encrypt (git-secret hide -m) files only when modified, the path mappings file tracks sha256sum checksums of the files added (git-secret add) to git-secret's path mappings filesystem database. Although, the chances of encountering a sha collision are low, it is recommend that you pad files with random data for greater security. Or avoid using the -m option altogether. If your secret file holds more data than just a single password these precautions should not be necessary, but could be followed for greater security.

If you found any security related issues, please do not disclose it in public. Send an email to security@wemake.services

Changelog

git-secret uses semver. See CHANGELOG.md.

Contributors

This project exists thanks to all the people who contribute. [Contribute].

Packagers

Thanks also to all the people and groups who package git-secret to be easier to install on particular OSes or distributions!

Here are some packagings of git-secret that we're aware of:

Such packages are considered 'downstream' because the git-secret code 'flows' from the git-secret repository to the various rpm/deb/dpkg/etc packages that are created for specific OSes and distributions.

We have also added notes specifically for packagers in CONTRIBUTING.md.