Use git-secret to store encrypted secrets in the repository

• git-secret

  22 3,621 5.7 Shell

  :busts_in_silhouette: A bash-tool to store your private data inside a git repository.

# File: .docker/images/php/base/Dockerfile # install git-secret # @see https://git-secret.io/installation#alpine ADD https://gitsecret.jfrog.io/artifactory/api/security/keypair/public/repositories/git-secret-apk /etc/apk/keys/git-secret-apk.rsa.pub RUN echo "https://gitsecret.jfrog.io/artifactory/git-secret-apk/all/main" >> /etc/apk/repositories && \ apk add --update --no-cache \ bash \ git-secret \ gnupg \ make \ #...

• docker-php-tutorial

  5 315 0.0 PHP

  Example files of my tutorial on PHP on Docker (check out the branches!)

All code samples are publicly available in my Docker PHP Tutorial repository on github. You find the branch with the final result of this tutorial at part-6-git-secret-encrypt-repository-docker.

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• Vault

  160 29,693 10.0 Go

  A tool for secrets management, encryption as a service, and privileged access management

  

In fact, entire products have been build around dealing with secrets, e.g. HashiCorp Vault, AWS Secrets Manager or the GCP Secret Manager. Introducing those in a project comes with a certain overhead as it's yet another service that needs to be integrated and maintained. Maybe it is the exactly right decision for your use-case - maybe it's overkill. By the end of this article you'll at least be aware of an alternative with a lower barrier to entry. See also the Pros and cons section in the end for an overview.

• berglas

  37 1,224 6.9 Go

  A tool for managing secrets on Google Cloud

  

In fact, entire products have been build around dealing with secrets, e.g. HashiCorp Vault, AWS Secrets Manager or the GCP Secret Manager. Introducing those in a project comes with a certain overhead as it's yet another service that needs to be integrated and maintained. Maybe it is the exactly right decision for your use-case - maybe it's overkill. By the end of this article you'll at least be aware of an alternative with a lower barrier to entry. See also the Pros and cons section in the end for an overview.

Suggest a related project