# Install git-secret with Homebrew, apk, apt, dnf, MacPorts, Nix Bash-tool to store the private data inside a git repo. Version 0.5.0 via Homebrew; verified 2026-06-22. ## Install ```sh sudo av install brew:git-secret ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install git-secret ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install git-secret ``` Evidence: MacPorts ports tree: devel/git-secret/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add git-secret ``` Evidence: Alpine Linux edge package indexes: git-secret from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install git-secret ``` Evidence: Debian stable package indexes: git-secret from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install git-secret ``` Evidence: Fedora Rawhide package metadata: git-secret from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#git-secret ``` Evidence: nixpkgs package indexes: pkgs/by-name/gi/git-secret/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## Package facts - **Package key:** brew:git-secret - **Package manager:** Homebrew - **Package manager page:** - **Version:** 0.5.0 - **Source summary:** Bash-tool to store the private data inside a git repo - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** MIT - **Source archive:** - **Last updated:** 2026-06-22T14:03:31-07:00 - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - git-secret (cli) - git-secret (alias) ## Dependencies - gawk - gnupg ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_big_sur, arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, big_sur, catalina, monterey, sonoma, ventura ## Freshness - Page generated: 2026-07-08 - Package-manager version: 0.5.0 - Package-manager updated: 2026-06-22 - Local data: ok - Upstream repository: https://github.com/sobolevn/git-secret - Upstream latest detected: v0.5.0 (current) ## Project history and usage git-secret is a Bash and GPG tool for storing encrypted private files inside a Git repository. It targets the deployment and configuration problem of keeping secrets versioned with code without committing plaintext values. ### Project history The GitHub repository was created in 2016 by the sobolevn project, and the documentation frames the tool around GPG public-key access control. The command set grew around `init`, `tell`, `add`, `hide`, `reveal`, `cat`, and access-removal operations. The changelog records steady hardening of a shell-based security tool: path mappings moved into `.gitsecret/paths/mapping.cfg`, modified-file hiding was added, FreeBSD and BusyBox support improved, Fedora packaging was noted, CI moved across platforms, and the 0.5.0 series added armored-output support and more robust permission handling. ### Adoption history git-secret gained a broader footprint than many Git secret tools because it was packaged for Homebrew, Debian-family systems, Fedora/RPM workflows, Alpine, and other downstream repositories. Its documentation also includes CI/CD usage, which made it attractive for deployment pipelines that already rely on Git and GPG. ### How it is used Practitioners initialize `.gitsecret`, add trusted users' public keys with `git secret tell`, mark files with `git secret add`, encrypt them with `git secret hide`, and decrypt them with `git secret reveal` or `git secret cat`. Teams rotate access by removing a person from the keyring and re-encrypting files for the remaining recipients. ### Why package nerds care The package is significant because it is a portable shell implementation of repository-local secret sharing. It appeals to users who want encrypted files to travel with Git history and package managers rather than adopting an external secrets service. ### Timeline - 2016: Public GitHub repository created. - 0.2.3: `.gitsecret/paths/mapping.cfg` introduced for tracked secret path metadata. - 0.2.6: Fedora package availability noted and FreeBSD/Windows testing work expanded. - 0.3.0: BusyBox support and additional GPG behavior handling added. - 0.5.0: Armored encrypted output and stronger key-directory permissions added. ### Related projects - Related technologies include GnuPG, Git hooks, CI/CD secret injection, repository-local encrypted files, and other Git-centered secret-management tools. ### Sources - - - - - - ## Security Notes narrow executable package without higher-risk signals. - **Geiger risk:** green / low - narrow executable package without higher-risk signals ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** git-secret - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Debian apt - git-secret - 0.5.0-1: normalized package name match | Debian stable package indexes: git-secret from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | store encrypted credential inside source code git repository | https://github.com/sobolevn/git-secret - Nix - git-secret: normalized package name match | nixpkgs package indexes: pkgs/by-name/gi/git-secret/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - git-secret - 0.5.0-1: normalized package name match | Ubuntu 24.04 LTS package indexes: git-secret from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | store encrypted credential inside source code git repository | https://github.com/sobolevn/git-secret - apk - git-secret - 0.5.0-r0: normalized package name match | Alpine Linux edge package indexes: git-secret from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | A bash-tool to store your private data inside a git repository | https://git-secret.io/ - apk - git-secret-doc - 0.5.0-r0: normalized package name match | Alpine Linux edge package indexes: git-secret-doc from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | A bash-tool to store your private data inside a git repository (documentation) | https://git-secret.io/ - dnf - git-secret - 0.5.0-10.fc44: normalized package name match | Fedora Rawhide package metadata: git-secret from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | A bash-tool to store your private data inside a git repository | http://git-secret.io/ - MacPorts - git-secret: normalized package name match | MacPorts ports tree: devel/git-secret/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ## Related links - [Source-control packages](https://www.automicvault.com/pkg/source-control-tools/) - Belongs to a source-control command family. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Database and data packages](https://www.automicvault.com/pkg/database-data-tools/) - Matched database, SQL, migration, or data-store metadata. - [gawk](https://www.automicvault.com/pkg/brew/gawk/) - Runtime dependency declared by Homebrew. - [gnupg](https://www.automicvault.com/pkg/brew/gnupg/) - Runtime dependency declared by Homebrew. - [git-remote-gcrypt](https://www.automicvault.com/pkg/brew/git-remote-gcrypt/) - Shares av.db curated category or tags: cli, encryption, git, gpg, security. - [fnox](https://www.automicvault.com/pkg/brew/fnox/) - Shares av.db curated category or tags: cli, encryption, secrets, secrets-management, security. - [shush](https://www.automicvault.com/pkg/brew/shush/) - Shares av.db curated category or tags: cli, encryption, secrets, secrets-management, security. - [transcrypt](https://www.automicvault.com/pkg/brew/transcrypt/) - Shares av.db curated category or tags: bash, cli, encryption, git, secrets. - [doppler](https://www.automicvault.com/pkg/brew/doppler/) - Shares av.db curated category or tags: cli, secrets, secrets-management, security. - [git-crypt](https://www.automicvault.com/pkg/brew/git-crypt/) - Shares av.db curated category or tags: cli, encryption, git, secrets, security. - [gittuf](https://www.automicvault.com/pkg/brew/gittuf/) - Shares av.db curated category or tags: cli, git, security, version-control. - [ksops](https://www.automicvault.com/pkg/brew/ksops/) - Shares av.db curated category or tags: cli, secrets, secrets-management, security. ## Combined YAML source View the package source record on GitHub. [combined/git-secret.yml](https://github.com/automic-vault/db/blob/main/combined/git-secret.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph