git-secret

git-secret is a command‑line utility written in Bash that lets users keep private files inside a regular Git repository. It encrypts each file with the public PGP keys of authorized collaborators, so the data can be stored alongside source code while remaining unreadable to anyone without the matching secret keys. When a user’s access is revoked, their key can be removed from the repository’s keyring and the files re‑encrypted, preventing further decryption without altering the secrets themselves.

The tool is aimed at developers and teams who already use Git for version control and need a simple way to protect configuration files, credentials, or other sensitive assets without leaving the repository. It integrates with existing Git workflows, tracking changes and only re‑encrypting files when they are modified, and relies on common utilities such as git, gpg, bash, gawk, and sha256sum.

Installation is supported through standard package managers like Homebrew, apt, and yum, as well as manual builds via make. The project follows semantic versioning, provides a public issue tracker for contributions, and includes documentation on security considerations and packaging for various Linux distributions.