Gitリポジトリやファイル、標準入力からパスワードやAPIキー、トークンなどのハードコードされたシークレットを検出するCLIツール。
sobolevn/git-secret
A bash tool that stores private files encrypted with GPG inside a git repository, shared with trusted users by their public keys.
- スター
- 4,056
- フォーク
- 213
- 未解決の Issue
- 153
- 最終コミット
- 21 日前
これは何?
git-secret keeps private data such as passwords, keys, or config files inside a git repository in encrypted form. Files are encrypted with the public keys of the users you permit, so those users can decrypt them with their own GPG secret keys. Access is managed through git-secret commands rather than by manually handling GPG encryption.
When a team member loses access, you remove their key from the repository keyring with the removeperson command and re-encrypt the files. The project notes that if the removed user may already have copied the secrets, the secrets themselves should also be changed.
The tool is written in Bash and needs bash, gawk, git, gpg and sha256sum (or shasum on FreeBSD and macOS). It can be installed via Homebrew, apt, yum, or make.
主な機能
- 01Encrypts files with GPG using each permitted user's public key.
- 02Adds and removes users by managing the repository keyring.
- 03Re-encrypts secrets after access changes with a single command.
- 04Stores encrypted files in git so they are versioned with the code.
- 05Installable through Homebrew, apt, yum, or make.
ユースケース
- Sharing database passwords or API keys with a small team through a repository.
- Keeping encrypted configuration files versioned alongside application code.
- Revoking a former collaborator's access without rotating every secret, when they have not copied them.
トピック
よくある質問
- git-secret とは?
- A bash tool that stores private files encrypted with GPG inside a git repository, shared with trusted users by their public keys. git-secret keeps private data such as passwords, keys, or config files inside a git repository in encrypted form. Files are encrypted with the public keys of the users you permit, so those users can decrypt them with their own GPG secret keys. Access is managed through git-secret commands rather than by manually handling GPG encryption.
- git-secret は無料で使えますか?ライセンスは?
- git-secret は MIT ライセンスのオープンソースです。商用製品で使う前にライセンス条件を確認してください。
- git-secret は今もメンテナンスされていますか?
- 活発にメンテナンス中。git-secret の最終コミットは 2026年9月28日 です。
- git-secret は何に使えますか?
- Sharing database passwords or API keys with a small team through a repository. Keeping encrypted configuration files versioned alongside application code. Revoking a former collaborator's access without rotating every secret, when they have not copied them.
- git-secret はどこで入手できますか?
- ソースコードとインストール手順は GitHub にあります:https://github.com/sobolevn/git-secret
概要はプロジェクトの README をもとに AI が生成しています。GitHub の数値は毎日更新されます。
関連プロジェクト
ユーザー識別子を使わないエンドツーエンド暗号化メッセージングアプリとネットワーク。iOS、Android、デスクトップ、CLIに対応。
Open-source disk encryption software for creating encrypted volumes and partitions, forked from TrueCrypt 7.1a with security enhancements.
A curated, categorized list of privacy- and security-focused software and online services, from password managers to operating systems.
Structured study notes in 18 modules covering Linux terminal, networking, permissions, scripting and kernel basics, based on the Linux Basics for Hackers book.