better error messages |
6 years ago | |
---|---|---|
.Dockerfiles | 7 years ago | |
.ci | 6 years ago | |
.github | 7 years ago | |
man | 6 years ago | |
src | 6 years ago | |
tests | 6 years ago | |
utils | 6 years ago | |
.editorconfig | 9 years ago | |
.gitattributes | 9 years ago | |
.gitignore | 7 years ago | |
.kitchen.yml | 6 years ago | |
.travis.yml | 7 years ago | |
CHANGELOG.md | 6 years ago | |
CONTRIBUTING.md | 7 years ago | |
Gemfile | 7 years ago | |
LICENSE.md | 8 years ago | |
Makefile | 7 years ago | |
README.md | 6 years ago | |
git-secret.plugin.zsh | 8 years ago |
README.md
git-secret
What is git-secret
?
git-secret
is a bash tool which stores private data inside a git repo. git-secret
encrypts tracked files with public keys for all users whom you trust using gpg
. Therefore, everyone has access to these tracked files using only their personal secret key. With git-secret
changes to access rights is made easy and private-public key issues are avoided. Passwords do not needed changing with git-secret
and when someone is out - just delete their public key, re-encrypt the files, and they won’t be able to decrypt secrets anymore.
Preview
Installation
git-secret
supports brew
, just type: brew install git-secret
It also supports apt
and yum
. You can also use make
if you want to.
See the installation section for the details.
Requirements
git-secret
relies on several external packages:
bash
since3.2.57
(it is hard to tell the correctpatch
release)gawk
since4.0.2
git
since1.8.3.1
gpg
sincegnupg 1.4
tognupg 2.X
sha256sum
since8.21
Contributing
Do you want to help the project? Find an issue and send a PR. It is more than welcomed! See CONTRIBUTING.md on how to do that.
Security
In order to encrypt (git-secret hide -m) files only when modified, the path
mappings file tracks sha256sum checksums of the files added (git-secret add) to
git-secret's path mappings filesystem database. Although, the chances of
encountering a sha collision are low, it is recommend that you pad files with
random data for greater security. Or avoid using the -m
option altogether.
If your secret file holds more data than just a single password these
precautions should not be necessary, but could be followed for greater
security.
If you found any security related issues, please do not enclose it in public. Send an email to security@wemake.services
Changelog
git-secret
uses semver. See CHANGELOG.md.
Contributors
This project exists thanks to all the people who contribute. [Contribute].
Backers
Thank you to all our backers! 🙏 [Become a backer]
Sponsors
Support this project by becoming a sponsor. Your logo will show up here with a link to your website. [Become a sponsor]
License
MIT. See LICENSE.md for details.
Thanks
Special thanks to Elio Qoshi from ura for the awesome logo.