grypt is a tool that allows one to store secrets in a git repository.
Here's an example to start a repository using grypt, assuming you're inside a repository.
If you want a random key: % grypt keygen .git/key
If you want to derive a key from a passphrase (perhaps for easy sharing later): % grypt phrase .git/key
Note: run keygen
or phrase
, not both.
% grypt init .git/key
grypt will print out a suggestion on what to enter in the repository's
.gitattributes
file. For more information, see gitattributes(5).
grypt help
will display some online help.
grypt uses deterministic encryption and enciphers/deciphers data as it is written to the git object store. If a repository is not configured to use grypt, the encrypted blob is displayed. git's filter support is used for this, see git-config(1) for more information.