macOS
Homebrewverified · 100%
brew install git-secretprovider-native install command
brew / rank 2027
Install git-secret with Homebrew
Bash-tool to store the private data inside a git repo. Version 0.5.0 via Homebrew; verified 2026-06-22.
install
Additional install commands
overview
Package summary
Bash-tool to store the private data inside a git repo
Project links
Commands and aliases
- git-secret
history
Project history and usage
git-secret is a Bash and GPG tool for storing encrypted private files inside a Git repository. It targets the deployment and configuration problem of keeping secrets versioned with code without committing plaintext values.
Project history
The GitHub repository was created in 2016 by the sobolevn project, and the documentation frames the tool around GPG public-key access control. The command set grew around `init`, `tell`, `add`, `hide`, `reveal`, `cat`, and access-removal operations.
The changelog records steady hardening of a shell-based security tool: path mappings moved into `.gitsecret/paths/mapping.cfg`, modified-file hiding was added, FreeBSD and BusyBox support improved, Fedora packaging was noted, CI moved across platforms, and the 0.5.0 series added armored-output support and more robust permission handling.
Adoption history
git-secret gained a broader footprint than many Git secret tools because it was packaged for Homebrew, Debian-family systems, Fedora/RPM workflows, Alpine, and other downstream repositories. Its documentation also includes CI/CD usage, which made it attractive for deployment pipelines that already rely on Git and GPG.
How it is used
Practitioners initialize `.gitsecret`, add trusted users' public keys with `git secret tell`, mark files with `git secret add`, encrypt them with `git secret hide`, and decrypt them with `git secret reveal` or `git secret cat`. Teams rotate access by removing a person from the keyring and re-encrypting files for the remaining recipients.
Why package nerds care
The package is significant because it is a portable shell implementation of repository-local secret sharing. It appeals to users who want encrypted files to travel with Git history and package managers rather than adopting an external secrets service.
Timeline
- 2016: Public GitHub repository created.
- 0.2.3: `.gitsecret/paths/mapping.cfg` introduced for tracked secret path metadata.
- 0.2.6: Fedora package availability noted and FreeBSD/Windows testing work expanded.
- 0.3.0: BusyBox support and additional GPG behavior handling added.
- 0.5.0: Armored encrypted output and stronger key-directory permissions added.
Related projects
- Related technologies include GnuPG, Git hooks, CI/CD secret injection, repository-local encrypted files, and other Git-centered secret-management tools.
Sources
- https://formulae.brew.sh/formula/git-secret
- https://github.com/sobolevn/git-secret
- https://raw.githubusercontent.com/sobolevn/git-secret/master/CHANGELOG.md
- https://raw.githubusercontent.com/sobolevn/git-secret/master/README.md
- https://sobolevn.me/git-secret/
- https://sobolevn.me/git-secret/installation.html
security posture
Risk level: green
narrow executable package without higher-risk signals.
Risk classifier
green risk · low confidence · appliance
Why
- narrow executable package without higher-risk signals
Signals
- metadata:no-higher-risk-signals
Install behavior
- No Homebrew bottle metadata was recorded.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
git-secret | executable | indexed executable | Discovered from the local executable index. |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-08-03
manager version0.5.0
manager updated2026-06-22
local dataunknown
upstreamnot available
latest detectednot detected
- okNo freshness warnings were generated.
install metadata
Package metadata
| Package key | brew:git-secret |
|---|---|
| Version | 0.5.0 |
| Package manager | Homebrew |
| Homepage | https://sobolevn.me/git-secret |
| Repository | https://github.com/sobolevn/git-secret |
| Last updated | 2026-06-22T14:03:31-07:00 |
| Pulse | updated |
| Bottle | not recorded |
| Service | none declared |
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- Nucleus package database
- curated package history
- pkgdb category and tag curation