# git-secret を Homebrew, apk, apt, dnf, MacPorts, Nix でインストール

git-secret のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

## インストール

```sh
sudo av install brew:git-secret
```

追加のインストールコマンド:

### macOS

- Homebrew (100%):

```sh
brew install git-secret
```

  証拠: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install git-secret
```

  証拠: MacPorts ports tree: devel/git-secret/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- apk (92%):

```sh
sudo apk add git-secret
```

  証拠: Alpine Linux edge package indexes: git-secret from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz

- Debian apt (92%):

```sh
sudo apt install git-secret
```

  証拠: Debian stable package indexes: git-secret from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- dnf (92%):

```sh
sudo dnf install git-secret
```

  証拠: Fedora Rawhide package metadata: git-secret from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/210a2053c8e007daf9ae39c2a21daaed9b2ddd07d63ecffa597050361e73650c-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#git-secret
```

  証拠: nixpkgs package indexes: pkgs/by-name/gi/git-secret/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

## パッケージ情報

- **パッケージキー:** brew:git-secret
- **パッケージマネージャ:** Homebrew
- **パッケージマネージャページ:** <https://formulae.brew.sh/formula/git-secret>
- **バージョン:** 0.5.0
- **ソース概要:** Bash-tool to store the private data inside a git repo
- **ホームページ:** <https://sobolevn.me/git-secret>
- **リポジトリ:** <https://github.com/sobolevn/git-secret>
- **上流ドキュメント:** <https://sobolevn.me/git-secret>
- **ライセンス:** MIT
- **ソースアーカイブ:** <https://github.com/sobolevn/git-secret/archive/refs/tags/v0.5.0.tar.gz>
- **最終更新:** 2026-06-22T14:03:31-07:00
- **生成日時:** 2026-08-04T22:13:35+00:00

## 実行可能ファイル

- git-secret (cli)
- git-secret (エイリアス)

## 依存関係

- gawk
- gnupg

## インストール挙動

- post-install フック: 未定義
- Bottle: 利用可能 対象 arm64_big_sur, arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, big_sur, catalina, monterey, sonoma, ventura

## バージョンと鮮度

- ページ生成日: 2026-08-04
- マネージャ版: 0.5.0
- マネージャ更新日: 2026-06-22
- ローカルデータ: OK
- 上流リポジトリ: https://github.com/sobolevn/git-secret
- 検出された最新: v0.5.0 (最新)
## プロジェクトの歴史と使われ方

git-secret is a Bash and GPG tool for storing encrypted private files inside a Git repository. It targets the deployment and configuration problem of keeping secrets versioned with code without committing plaintext values.

### プロジェクトの歴史

The GitHub repository was created in 2016 by the sobolevn project, and the documentation frames the tool around GPG public-key access control. The command set grew around `init`, `tell`, `add`, `hide`, `reveal`, `cat`, and access-removal operations.

The changelog records steady hardening of a shell-based security tool: path mappings moved into `.gitsecret/paths/mapping.cfg`, modified-file hiding was added, FreeBSD and BusyBox support improved, Fedora packaging was noted, CI moved across platforms, and the 0.5.0 series added armored-output support and more robust permission handling.

### 採用の歴史

git-secret gained a broader footprint than many Git secret tools because it was packaged for Homebrew, Debian-family systems, Fedora/RPM workflows, Alpine, and other downstream repositories. Its documentation also includes CI/CD usage, which made it attractive for deployment pipelines that already rely on Git and GPG.

### 使われ方

Practitioners initialize `.gitsecret`, add trusted users' public keys with `git secret tell`, mark files with `git secret add`, encrypt them with `git secret hide`, and decrypt them with `git secret reveal` or `git secret cat`. Teams rotate access by removing a person from the keyring and re-encrypting files for the remaining recipients.

### パッケージ好きにとっての重要性

The package is significant because it is a portable shell implementation of repository-local secret sharing. It appeals to users who want encrypted files to travel with Git history and package managers rather than adopting an external secrets service.

### タイムライン

- 2016: Public GitHub repository created.
- 0.2.3: `.gitsecret/paths/mapping.cfg` introduced for tracked secret path metadata.
- 0.2.6: Fedora package availability noted and FreeBSD/Windows testing work expanded.
- 0.3.0: BusyBox support and additional GPG behavior handling added.
- 0.5.0: Armored encrypted output and stronger key-directory permissions added.

### Related projects

- Related technologies include GnuPG, Git hooks, CI/CD secret injection, repository-local encrypted files, and other Git-centered secret-management tools.

### ソース

- <https://formulae.brew.sh/formula/git-secret>
- <https://github.com/sobolevn/git-secret>
- <https://raw.githubusercontent.com/sobolevn/git-secret/master/CHANGELOG.md>
- <https://raw.githubusercontent.com/sobolevn/git-secret/master/README.md>
- <https://sobolevn.me/git-secret/>
- <https://sobolevn.me/git-secret/installation.html>


## セキュリティノート

narrow executable package without higher-risk signals.

- **Geiger リスク:** グリーン / 低
- narrow executable package without higher-risk signals

## ソースデータベース詳細

- **Source Database:** Homebrew formula API
- **Tap:** homebrew/core
- **Full Name:** git-secret
- **Version Scheme:** 0
- **Revision:** 0
- **Head Version:** HEAD
- **Bottle Stable Root URL:** <https://ghcr.io/v2/homebrew/core>
- **Deprecated:** no
- **Disabled:** no
- **Keg Only:** no
- **URL Keys:** head, stable

## 他のパッケージマネージャ記録

- Debian apt - git-secret - 0.5.0-1: normalized package name match | Debian stable package indexes: git-secret from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | store encrypted credential inside source code git repository | https://github.com/sobolevn/git-secret
- Nix - git-secret: normalized package name match | nixpkgs package indexes: pkgs/by-name/gi/git-secret/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Ubuntu apt - git-secret - 0.5.0-1: normalized package name match | Ubuntu 24.04 LTS package indexes: git-secret from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | store encrypted credential inside source code git repository | https://github.com/sobolevn/git-secret
- apk - git-secret - 0.5.0-r0: normalized package name match | Alpine Linux edge package indexes: git-secret from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | A bash-tool to store your private data inside a git repository | https://git-secret.io/
- apk - git-secret-doc - 0.5.0-r0: normalized package name match | Alpine Linux edge package indexes: git-secret-doc from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | A bash-tool to store your private data inside a git repository (documentation) | https://git-secret.io/
- dnf - git-secret - 0.5.0-11.fc45: normalized package name match | Fedora Rawhide package metadata: git-secret from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/210a2053c8e007daf9ae39c2a21daaed9b2ddd07d63ecffa597050361e73650c-primary.xml.zst | A bash-tool to store your private data inside a git repository | http://git-secret.io/
- MacPorts - git-secret: normalized package name match | MacPorts ports tree: devel/git-secret/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1


## 関連リンク

- [Source-control packages](https://pkg.so/ja/source-control-tools/) - Belongs to a source-control command family.
- [Terminal utility packages](https://pkg.so/ja/terminal-utilities/) - Matched terminal and command-line workflow metadata.
- [Networking and protocol packages](https://pkg.so/ja/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata.
- [Database and data packages](https://pkg.so/ja/database-data-tools/) - Matched database, SQL, migration, or data-store metadata.
- [gnupg](https://pkg.so/ja/brew/gnupg/) - Runtime dependency declared by Homebrew.
- [gawk](https://pkg.so/ja/brew/gawk/) - Runtime dependency declared by Homebrew.
- [transcrypt](https://pkg.so/ja/brew/transcrypt/) - Shares pkgdb curated category or tags: bash, cli, encryption, git, secrets.
- [git-crypt](https://pkg.so/ja/brew/git-crypt/) - Shares pkgdb curated category or tags: cli, encryption, git, secrets, security.
- [gopass](https://pkg.so/ja/brew/gopass/) - Shares pkgdb curated category or tags: cli, git, gpg, secrets, security.
- [blackbox](https://pkg.so/ja/brew/blackbox/) - Shares pkgdb curated category or tags: cli, encryption, gpg, secrets, security.
- [git-remote-gcrypt](https://pkg.so/ja/brew/git-remote-gcrypt/) - Shares pkgdb curated category or tags: cli, encryption, git, gpg, security.
- [kubeseal](https://pkg.so/ja/brew/kubeseal/) - Shares pkgdb curated category or tags: cli, encryption, secrets, security.
- [fnox](https://pkg.so/ja/brew/fnox/) - Shares pkgdb curated category or tags: cli, encryption, secrets, security.
- [envio](https://pkg.so/ja/brew/envio/) - Shares pkgdb curated category or tags: cli, encryption, secrets, security.
- [git-secrets](https://pkg.so/ja/brew/git-secrets/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, git, repo, secret, secrets.

## Combined YAML source

View the package source record on GitHub. [combined/git-secret.yml](https://github.com/mxcl/pkgdb/blob/main/combined/git-secret.yml)


## ソース

- pkg.so package database
- Geiger risk classifier
- package-page enrichment
- curated package history
- package version freshness
- pkgdb category and tag curation
- package relationship graph
- external package-manager database matches
- cross-ecosystem install command graph