AGWA/git-crypt on Hacker News

I've not tried this, however https://github.com/AGWA/git-crypt Apparently someone has developed something similar to this

comment by piersj225 · 2026-03-27 · in If you don't opt out by Apr 24 GitHub will train on your private repos

…and lets you use GPG keys or symmetric keys. And it's been around for quite a while. ⁽¹⁾ https://github.com/AGWA/git-crypt

comment by eddyg · 2025-12-08 · in Show HN: Lockenv – Simple encrypted secrets storage for Git

…But then you might consider stepping up to something like Hashicorp Vault[3] or Infisical[4]. [0] https://github.com/AGWA/git-crypt/issues/273 [1] https://www.passwordstore.org/ [2] https://github.com/getsops/sops [3]…

comment by visualphoenix · 2024-11-27 · in Git-crypt – transparent file encryption in Git

…being passed around. That said, it is a valid way that some folks use (see https://dotenvx.com/ , https://github.com/AGWA/git-crypt , https://github.com/getsops/sops ) which can make sense for simpler projects with less stringent security…

comment by theozero · 2024-10-06 · in DMNO: Environment Variables Evolved

…low effort approaches I've found work. For an easy, slightly hacky version I've used git-crypt ( https://github.com/AGWA/git-crypt ) with tiny teams. You'll need to share the decryption key (e.g. via 1password shared vaults). As your need…

comment by starwatch · 2024-09-26 · in Ask HN: What tools should I use to manage secrets from env files?

…them to the repo. Not sure if it’s still fine, I see their last release is 2 years old nowadays. https://github.com/AGWA/git-crypt

comment by paride5745 · 2024-09-08 · in Ask HN: How do you share and sync .env files and secrets with your team

These? [0] https://github.com/AGWA/git-crypt [1] https://github.com/getsops/sops

comment by mkl · 2024-08-05 · in Age is a simple, modern and secure file encryption tool, format, and Go library

…and is well known. Transparent support at the editor level (age.el) sounds really nice though. [0] https://github.com/AGWA/git-crypt [1] https://github.com/getsops/sops

comment by hardwaresofton · 2024-08-05 · in Age is a simple, modern and secure file encryption tool, format, and Go library

…encryption key [that would use keys published on a keyserver] is email. I use this on some repos https://github.com/AGWA/git-crypt And occasionally to encrypt files, or receive encrypted files. These are practical things which are…

comment by erinaceousjones · 2024-04-11 · in Why can't my mom email me?

It's not a problem. Here you go: https://github.com/AGWA/git-crypt

comment by porsager · 2023-10-12 · in The Twelve-Factor App (2011)

You can use something like git-crypt[0] to e2e encrypt it. [0]: https://github.com/AGWA/git-crypt

comment by cube2222 · 2023-07-06 · in Joplin – An open-source note taking and to-do application with synchronisation

How about encryption? https://github.com/AGWA/git-crypt has been solid for me

comment by tln · 2023-06-04 · in GitHub Private Repos Considered Private-Ish

…snapshot of your files in the event that nobody is able to decrypt your committed files. [1] - https://github.com/AGWA/git-crypt [2] - https://news.ycombinator.com/item?id=7508734 [3] - https://github.com/elasticdog/transcrypt

comment by LinuxBender · 2023-04-02 · in Ask HN: Privacy-Conscious GitHub?

…of possible solutions: git-remote-gcrypt: https://github.com/spwhitton/git-remote-gcrypt git-crypt: https://github.com/AGWA/git-crypt git-secret: https://github.com/sobolevn/git-secret However, most people who self-host their Git…

comment by layer8 · 2022-07-27 · in Using GNU Stow to manage your dotfiles (2012)

This appears to be a design decision borrowed/inherited from git-crypt: https://github.com/AGWA/git-crypt#security The gain is that encrypted output is deterministic (which git seems to require), with the trade-off of leaking some…

comment by re · 2022-03-16 · in Show HN: Partially encrypt a file based on its HEREDOCs

FYI: this was inspired by the great `git-crypt` ( https://github.com/AGWA/git-crypt ) More on my motivations here: https://encapsulate.me/writing/Privatize.html

comment by higgins · 2022-03-16 · in Show HN: Partially encrypt a file based on its HEREDOCs

You should at least consider encrypting the PII on git, https://github.com/AGWA/git-crypt it is not rocket sience

comment by WYepQ4dNnG · 2022-03-04 · in A GitHub repository was public-viewable

…separate folder [2] and is not managed in nix. Tangent: Secrets are are encrypted with git-crypt ( https://github.com/AGWA/git-crypt ) and live in the same repo [3]. I generate GPG keys for every new host I am working on and check in the…

comment by heinrichhartman · 2021-10-16 · in NixOS and the Art of OS Configuration (2018)

git-crypt, https://github.com/AGWA/git-crypt , provides better analogous functionality, and supports GPG in addition to a single shared symmetric key.

comment by hn_throwaway_99 · 2021-09-15 · in Git-Secrets: Save sensitive files in Git repositories securely

…in another one, at my company we are using git-crypt [1], and it works pretty well in our case [1] https://github.com/AGWA/git-crypt

comment by nonninz · 2020-12-08 · in Simple and flexible tool for managing secrets

I like git-crypt for this: https://github.com/AGWA/git-crypt

comment by lionyo · 2020-07-05 · in Show HN: Hide in Plain Sight, manage secrets alongside your code

Or make sure your secrets are transparently en/decrypted with GPG using: https://github.com/AGWA/git-crypt if you really have to (and use https://rtyley.github.io/bfg-repo-cleaner/ to cleanup any history of commited secrets). An .envrc…

comment by aequitas · 2019-04-15 · in Never commit secrets into Git repos

https://github.com/AGWA/git-crypt

comment by AdamMills · 2018-02-06 · in Ask HN: How does your company manage secrets like API keys?

…used git-crypt before to encrypt parts of a repo, but this approach seems much easier to manage. https://github.com/AGWA/git-crypt

comment by tln · 2017-10-04 · in Keybase launches encrypted Git

There's really not much involved. For the encrypted git repo, I use this: https://github.com/AGWA/git-crypt The cron points to a shell script: #!/bin/sh cd ~/notes git add -A . git commit -am wip git pull git push So with that, I have the…

comment by Diederich · 2017-10-02 · in Simple note taking from the command line

How do you guys, handle this problem? I use either `git-crypt` [1] or `ansible-vault` [2]. 1: https://github.com/AGWA/git-crypt 2: http://docs.ansible.com/ansible/playbooks_vault.html

comment by drinchev · 2017-02-15 · in GitHub commit search: “remove password”

Nice work! I've been using https://github.com/AGWA/git-crypt until now, always good to have more alternatives. Can you tell us what is different about your approach with this project?

comment by aeontech · 2016-05-09 · in Git-secret – store private data in a Git repo

…too difficult and I feel much better about putting secret information in my source code. :) [0] https://github.com/AGWA/git-crypt

comment by Corrado · 2016-03-13 · in Ask HN: How do you manage your SSH keys?

StackExchange's blackbox[0] has solved this problem for me. Alternatives: * https://github.com/AGWA/git-crypt * https://github.com/shadowhand/git-encrypt * http://docs.ansible.com/ansible/playbooks_vault.html *…

comment by chishaku · 2015-11-25 · in Git as an Encrypted Distributed Version Control System

If you decide to take the git filters approach, git-crypt[0] is a good choice. [0] https://github.com/AGWA/git-crypt

comment by michaelmior · 2015-08-18 · in SSH Keys on GitHub

Or perhaps https://github.com/AGWA/git-crypt

comment by emmelaich · 2015-03-13 · in How GitHub Conquered Google, Microsoft, and Everyone Else

…you git commands as normal. [0] http://git-scm.com/book/en/v2/Customizing-Git-Git-Attributes [1] https://github.com/AGWA/git-crypt

comment by michaelmior · 2015-02-14 · in How to Write a New Git Protocol

…point you actually need to convert your words into facts, at that point you don't agree anymore :) https://github.com/AGWA/git-crypt/commit/34432e915e8415b112c...

comment by giovannibajo1 · 2014-07-18 · in The getrandom(2) system call was requested by the LibreSSL Portable developers

We use git-crypt ( https://github.com/AGWA/git-crypt ) in our ansible repo for credentials. Credentials are stored as variable YAML files so anyone can work with them in templates, but only our deploy box and SRE team can encrypt/decrypt…

comment by andrewjshults · 2014-05-10 · in Bit.ly compromised – More Details

…Fortunately, you can swear off ever committing plaintext secrets to a repo. I use git-crypt: https://github.com/AGWA/git-crypt

comment by StavrosK · 2014-05-07 · in When a bad day gets worse – getting hacked twice in one day

…to properly do AES in CTR mode. If anyone's curious, here's the code where AES-CTR is implemented: https://github.com/AGWA/git-crypt/blob/master/crypto.cpp#L76 And here is where it calculates the nonce (and also checks to make sure the…

comment by agwa · 2014-04-02 · in Storing sensitive data in a git repository using git-crypt

…symmetric key file around. GPG support is currently on a feature branch and undergoing testing. See https://github.com/AGWA/git-crypt/issues/3 if you're interested.

comment by agwa · 2014-04-01 · in Storing sensitive data in a git repository using git-crypt

Came across this today: https://github.com/AGWA/git-crypt Nearly the same but in C++

comment by janerik · 2013-02-07 · in Transparent Git Encryption

…the manual makefile steps. As an added bonus, git diff/blame still work on the encrypted file. [1] https://github.com/AGWA/git-crypt and http://www.agwa.name/projects/git-crypt/

comment by agwa · 2013-02-06 · in Keeping Passwords in Source Control