# git-secret mit Homebrew, apk, apt, dnf, MacPorts, Nix installieren Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für git-secret in AI-Agent-Workflows. ## Installation ```sh sudo av install brew:git-secret ``` Weitere Installationsbefehle: ### macOS - Homebrew (100%): ```sh brew install git-secret ``` Evidenz: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install git-secret ``` Evidenz: MacPorts ports tree: devel/git-secret/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add git-secret ``` Evidenz: Alpine Linux edge package indexes: git-secret from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install git-secret ``` Evidenz: Debian stable package indexes: git-secret from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install git-secret ``` Evidenz: Fedora Rawhide package metadata: git-secret from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/210a2053c8e007daf9ae39c2a21daaed9b2ddd07d63ecffa597050361e73650c-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#git-secret ``` Evidenz: nixpkgs package indexes: pkgs/by-name/gi/git-secret/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## Paketfakten - **Paketschlüssel:** brew:git-secret - **Paketmanager:** Homebrew - **Paketmanager-Seite:** - **Version:** 0.5.0 - **Quellzusammenfassung:** Bash-tool to store the private data inside a git repo - **Homepage:** - **Repository:** - **Upstream-Dokumentation:** - **Lizenz:** MIT - **Quellarchiv:** - **Zuletzt aktualisiert:** 2026-06-22T14:03:31-07:00 - **Generiert:** 2026-08-04T22:13:35+00:00 ## Executables - git-secret (cli) - git-secret (Alias) ## Abhängigkeiten - gawk - gnupg ## Installationsverhalten - Post-install-Hook: nicht definiert - Bottle: verfügbar auf arm64_big_sur, arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, big_sur, catalina, monterey, sonoma, ventura ## Version und Aktualität - Seite generiert: 2026-08-04 - Manager-Version: 0.5.0 - Manager aktualisiert: 2026-06-22 - lokale Daten: OK - Upstream-Repository: https://github.com/sobolevn/git-secret - neueste erkannte Version: v0.5.0 (aktuell) ## Projektgeschichte und Nutzung git-secret is a Bash and GPG tool for storing encrypted private files inside a Git repository. It targets the deployment and configuration problem of keeping secrets versioned with code without committing plaintext values. ### Projektgeschichte The GitHub repository was created in 2016 by the sobolevn project, and the documentation frames the tool around GPG public-key access control. The command set grew around `init`, `tell`, `add`, `hide`, `reveal`, `cat`, and access-removal operations. The changelog records steady hardening of a shell-based security tool: path mappings moved into `.gitsecret/paths/mapping.cfg`, modified-file hiding was added, FreeBSD and BusyBox support improved, Fedora packaging was noted, CI moved across platforms, and the 0.5.0 series added armored-output support and more robust permission handling. ### Adoptionsgeschichte git-secret gained a broader footprint than many Git secret tools because it was packaged for Homebrew, Debian-family systems, Fedora/RPM workflows, Alpine, and other downstream repositories. Its documentation also includes CI/CD usage, which made it attractive for deployment pipelines that already rely on Git and GPG. ### Wie es verwendet wird Practitioners initialize `.gitsecret`, add trusted users' public keys with `git secret tell`, mark files with `git secret add`, encrypt them with `git secret hide`, and decrypt them with `git secret reveal` or `git secret cat`. Teams rotate access by removing a person from the keyring and re-encrypting files for the remaining recipients. ### Warum Paket-Nerds sich dafür interessieren The package is significant because it is a portable shell implementation of repository-local secret sharing. It appeals to users who want encrypted files to travel with Git history and package managers rather than adopting an external secrets service. ### Zeitleiste - 2016: Public GitHub repository created. - 0.2.3: `.gitsecret/paths/mapping.cfg` introduced for tracked secret path metadata. - 0.2.6: Fedora package availability noted and FreeBSD/Windows testing work expanded. - 0.3.0: BusyBox support and additional GPG behavior handling added. - 0.5.0: Armored encrypted output and stronger key-directory permissions added. ### Related projects - Related technologies include GnuPG, Git hooks, CI/CD secret injection, repository-local encrypted files, and other Git-centered secret-management tools. ### Quellen - - - - - - ## Sicherheitshinweise narrow executable package without higher-risk signals. - **Geiger-Risiko:** grün / niedrig - narrow executable package without higher-risk signals ## Details aus der Quelldatenbank - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** git-secret - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Andere Paketmanager-Einträge - Debian apt - git-secret - 0.5.0-1: normalized package name match | Debian stable package indexes: git-secret from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | store encrypted credential inside source code git repository | https://github.com/sobolevn/git-secret - Nix - git-secret: normalized package name match | nixpkgs package indexes: pkgs/by-name/gi/git-secret/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - git-secret - 0.5.0-1: normalized package name match | Ubuntu 24.04 LTS package indexes: git-secret from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | store encrypted credential inside source code git repository | https://github.com/sobolevn/git-secret - apk - git-secret - 0.5.0-r0: normalized package name match | Alpine Linux edge package indexes: git-secret from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | A bash-tool to store your private data inside a git repository | https://git-secret.io/ - apk - git-secret-doc - 0.5.0-r0: normalized package name match | Alpine Linux edge package indexes: git-secret-doc from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | A bash-tool to store your private data inside a git repository (documentation) | https://git-secret.io/ - dnf - git-secret - 0.5.0-11.fc45: normalized package name match | Fedora Rawhide package metadata: git-secret from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/210a2053c8e007daf9ae39c2a21daaed9b2ddd07d63ecffa597050361e73650c-primary.xml.zst | A bash-tool to store your private data inside a git repository | http://git-secret.io/ - MacPorts - git-secret: normalized package name match | MacPorts ports tree: devel/git-secret/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ## Verwandte Links - [Source-control packages](https://pkg.so/de/source-control-tools/) - Belongs to a source-control command family. - [Terminal utility packages](https://pkg.so/de/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://pkg.so/de/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Database and data packages](https://pkg.so/de/database-data-tools/) - Matched database, SQL, migration, or data-store metadata. - [gnupg](https://pkg.so/de/brew/gnupg/) - Runtime dependency declared by Homebrew. - [gawk](https://pkg.so/de/brew/gawk/) - Runtime dependency declared by Homebrew. - [transcrypt](https://pkg.so/de/brew/transcrypt/) - Shares pkgdb curated category or tags: bash, cli, encryption, git, secrets. - [git-crypt](https://pkg.so/de/brew/git-crypt/) - Shares pkgdb curated category or tags: cli, encryption, git, secrets, security. - [gopass](https://pkg.so/de/brew/gopass/) - Shares pkgdb curated category or tags: cli, git, gpg, secrets, security. - [blackbox](https://pkg.so/de/brew/blackbox/) - Shares pkgdb curated category or tags: cli, encryption, gpg, secrets, security. - [git-remote-gcrypt](https://pkg.so/de/brew/git-remote-gcrypt/) - Shares pkgdb curated category or tags: cli, encryption, git, gpg, security. - [kubeseal](https://pkg.so/de/brew/kubeseal/) - Shares pkgdb curated category or tags: cli, encryption, secrets, security. - [fnox](https://pkg.so/de/brew/fnox/) - Shares pkgdb curated category or tags: cli, encryption, secrets, security. - [envio](https://pkg.so/de/brew/envio/) - Shares pkgdb curated category or tags: cli, encryption, secrets, security. - [git-secrets](https://pkg.so/de/brew/git-secrets/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, git, repo, secret, secrets. ## Combined YAML source View the package source record on GitHub. [combined/git-secret.yml](https://github.com/mxcl/pkgdb/blob/main/combined/git-secret.yml) ## Quellen - pkg.so package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - pkgdb category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph