What are the best tools for storing secrets with Git?

Question

3

Options
Considered

3

User
Recs.

Dec 6, 2018

Last
Updated

Here’s the Deal

2 Options Considered

Best tools for storing secrets with Git	Price	Last Updated
-- StackExchange Blackbox	-	Dec 6, 2018
-- git-secret	-	Dec 6, 2018

See Full List

Blackbox

See flagged products

I Recommend...

Built By the Slant team

Find the best product instantly.

4.7 star rating

Try it now - it's free

score 1 · Answer 1

StackExchange Blackbox

Top Pro

Allows easily sharing secrets with other team members

Since the secret files are stored in the remote VCS server, anyone that has access to it (team members) also have access to the secret files. See More

Top Pro

Free and open source

StackExchange Blackbox is free and open source. It's released under the MIT license and its source code is freely available on GitHub. See More

Top Pro

Guaranteed security and authenticity with GPG keys

GPG it's a tool widely used for keeping secrets, it's well integrated on Blackbox ensuring the security of the secret files in the repository. See More

Top Pro

Self-adaptable

BlackBox automatically detects which VCS you are using and configures itself to encrypt files in your repository. See More

Top Pro

Well documented

Teaches how to create a GPG key, encrypt, and decrypt files with a series of How-to guides including examples. All of this in its github's readme. See More

Top Pro

Can set-up automated users or roles

Some version control systems (VCS) may need access to unencrypted data, with BlackBox this can be done by setting up roles. You can see how here. This can allow accessing encrypted data with a subkey with no passphrase which is useful if other systems in your production environment need to read it. See More

Top Pro

Multiple VCS compatibility

Can be used with most VCS's out-of-the-box. Unlike other tools that work only with Git, Blackbox supports other VCS's. See More

See All

score 1 · Answer 2

git-secret

Top Pro

Built-in access management

Can revoke or add keys to allow or deny access to users without needing to change your keys or passphrase. See More

Alejandro Arciniegas's Experience

Very useful tool to hide information in public repositorys or shared workspaces where the data you want to hide is critical. I personally like it a lot, just a few commands and it is good to go. See More

Top Pro

Keeps track of encrypted files

git-secret encrypts files and stores them inside the repo, allowing you to keep track for every commit. See More

Top Pro

Easy and straightforward usage

Once the user has its GPG RSA Key-pair ready, running git secret init command will create .gitsecret/ folder, where the secret files will need to be added with the command git secret add <filenames...>, finally using git secret hide, will encrypt the files using the keys added with git secret tell command, then, they will be ready to be committed. See More

See All

The Slant team built an AI & it’s awesome

Find the best product instantly

What are the best tools for storing secrets with Git?

2 Options Considered

StackExchange Blackbox

My Recommendation for StackExchange Blackbox

My Recommendation for StackExchange Blackbox

Allows easily sharing secrets with other team members

Free and open source

Guaranteed security and authenticity with GPG keys

Self-adaptable

Well documented

Can set-up automated users or roles

Multiple VCS compatibility

git-secret

My Recommendation for git-secret

My Recommendation for git-secret

Built-in access management

Keeps track of encrypted files

Easy and straightforward usage

Don't see your favorite option? Add it.

Blackbox

My Recommendation for Blackbox

My Recommendation for Blackbox

One sec!