Automic VaultAutomic Vault

brew

Install git-secret with Homebrew, apk, apt, dnf, MacPorts, Nix

Bash-tool to store the private data inside a git repo. Version 0.5.0 via Homebrew; verified 2026-06-22.

Install commandSecurity notes

install

Additional install commands

macOS

Homebrewverified · 100%
brew install git-secret

local Homebrew formula metadata

MacPortsverified · 94%
sudo port install git-secret

MacPorts ports tree · devel/git-secret/Portfile · source: api.github.com

Linux

Alpine Linux apkverified · 92%
sudo apk add git-secret

Alpine Linux edge package indexes · git-secret · source: dl-cdn.alpinelinux.org

Debian aptverified · 92%
sudo apt install git-secret

Debian stable package indexes · git-secret · source: deb.debian.org

Fedora dnfverified · 92%
sudo dnf install git-secret

Fedora Rawhide package metadata · git-secret · source: dl.fedoraproject.org

Nixverified · 92%
nix profile install nixpkgs#git-secret

nixpkgs package indexes · pkgs/by-name/gi/git-secret/package.nix · source: api.github.com

overview

Package summary

Bash-tool to store the private data inside a git repo

Commands and aliases

  • git-secret

history

Project history and usage

git-secret is a Bash and GPG tool for storing encrypted private files inside a Git repository. It targets the deployment and configuration problem of keeping secrets versioned with code without committing plaintext values.

Project history

The GitHub repository was created in 2016 by the sobolevn project, and the documentation frames the tool around GPG public-key access control. The command set grew around `init`, `tell`, `add`, `hide`, `reveal`, `cat`, and access-removal operations.

The changelog records steady hardening of a shell-based security tool: path mappings moved into `.gitsecret/paths/mapping.cfg`, modified-file hiding was added, FreeBSD and BusyBox support improved, Fedora packaging was noted, CI moved across platforms, and the 0.5.0 series added armored-output support and more robust permission handling.

Adoption history

git-secret gained a broader footprint than many Git secret tools because it was packaged for Homebrew, Debian-family systems, Fedora/RPM workflows, Alpine, and other downstream repositories. Its documentation also includes CI/CD usage, which made it attractive for deployment pipelines that already rely on Git and GPG.

How it is used

Practitioners initialize `.gitsecret`, add trusted users' public keys with `git secret tell`, mark files with `git secret add`, encrypt them with `git secret hide`, and decrypt them with `git secret reveal` or `git secret cat`. Teams rotate access by removing a person from the keyring and re-encrypting files for the remaining recipients.

Why package nerds care

The package is significant because it is a portable shell implementation of repository-local secret sharing. It appeals to users who want encrypted files to travel with Git history and package managers rather than adopting an external secrets service.

Timeline

  • 2016: Public GitHub repository created.
  • 0.2.3: `.gitsecret/paths/mapping.cfg` introduced for tracked secret path metadata.
  • 0.2.6: Fedora package availability noted and FreeBSD/Windows testing work expanded.
  • 0.3.0: BusyBox support and additional GPG behavior handling added.
  • 0.5.0: Armored encrypted output and stronger key-directory permissions added.

Related projects

  • Related technologies include GnuPG, Git hooks, CI/CD secret injection, repository-local encrypted files, and other Git-centered secret-management tools.

security posture

Risk level: green

narrow executable package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

  • narrow executable package without higher-risk signals

Signals

  • metadata:no-higher-risk-signals

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 13 platform targets.
  • Installs with 2 runtime dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
git-secretcliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version0.5.0
manager updated2026-06-22
local dataok
upstreamcurrent
latest detectedv0.5.0

https://github.com/sobolevn/git-secret

  • okNo freshness warnings were generated.

install metadata

Package metadata

Package keybrew:git-secret
Version0.5.0
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/git-secret
Homepagehttps://sobolevn.me/git-secret
Repositoryhttps://github.com/sobolevn/git-secret
Upstream docshttps://github.com/sobolevn/git-secret#readme
LicenseMIT
Source archivehttps://github.com/sobolevn/git-secret/archive/refs/tags/v0.5.0.tar.gz
Last updated2026-06-22T14:03:31-07:00
Pulseupdated
Dependenciesgawk, gnupg
Bottleavailable (on arm64_big_sur, arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, big_sur, catalina, monterey, sonoma, ventura, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namegit-secret
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Debian apt95%

git-secret 0.5.0-1

store encrypted credential inside source code git repository

https://github.com/sobolevn/git-secret

sudo apt install git-secret
  • Section: vcs
  • Architecture: all
  • 4 dependencies
  • normalized package name match
  • Matched by: Git Secret
Debian stable package indexes · deb.debian.org · Debian stable package indexes: git-secret from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

git-secret

nix profile install nixpkgs#git-secret
  • normalized package name match
  • Matched by: Git Secret
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/gi/git-secret/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
Ubuntu apt95%

git-secret 0.5.0-1

store encrypted credential inside source code git repository

https://github.com/sobolevn/git-secret

sudo apt install git-secret
  • Section: universe/vcs
  • Architecture: all
  • 4 dependencies
  • normalized package name match
  • Matched by: Git Secret
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: git-secret from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
apk95%

git-secret 0.5.0-r0

A bash-tool to store your private data inside a git repository

https://git-secret.io/

sudo apk add git-secret
  • License: MIT
  • Architecture: x86_64
  • Source Package: git-secret
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Git Secret
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: git-secret from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
apk95%

git-secret-doc 0.5.0-r0

A bash-tool to store your private data inside a git repository (documentation)

https://git-secret.io/

sudo apk add git-secret-doc
  • License: MIT
  • Architecture: x86_64
  • Source Package: git-secret
  • normalized package name match
  • Matched by: Git Secret
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: git-secret-doc from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
dnf95%

git-secret 0.5.0-10.fc44

A bash-tool to store your private data inside a git repository

http://git-secret.io/

sudo dnf install git-secret
  • License: MIT
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: git-secret
  • 5 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Git Secret
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: git-secret from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
MacPorts95%

git-secret

sudo port install git-secret
  • normalized package name match
  • Matched by: Git Secret
MacPorts ports tree · api.github.com · MacPorts ports tree: devel/git-secret/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

Related tools

  • gawkRuntime dependency declared by Homebrew.
  • gnupgRuntime dependency declared by Homebrew.

Same workflow

  • git-remote-gcryptShares av.db curated category or tags: cli, encryption, git, gpg, security.
  • fnoxShares av.db curated category or tags: cli, encryption, secrets, secrets-management, security.
  • shushShares av.db curated category or tags: cli, encryption, secrets, secrets-management, security.
  • transcryptShares av.db curated category or tags: bash, cli, encryption, git, secrets.
  • dopplerShares av.db curated category or tags: cli, secrets, secrets-management, security.
  • git-cryptShares av.db curated category or tags: cli, encryption, git, secrets, security.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment