1GIT-SECRET-HIDE(1) git-secret GIT-SECRET-HIDE(1)
2
3
4
6 git-secret-hide - encrypts all added files with the inner keyring.
7
9 git secret hide [-c] [-F] [-P] [-v] [-d] [-m]
10
12 git-secret-hide creates an encrypted version (typically called file‐
13 name.txt.secret) of each file added by git-secret-add command. Now any‐
14 one enabled via ´git secret tell´ can can decrypt these files. Under
15 the hood, git-secret uses the keyring in .gitsecret/keys and user´s
16 secret keys to decrypt the files.
17
18 It is recommended to encrypt (or re-encrypt) all the files in a
19 git-secret repo each time git secret hide is run.
20
21 Otherwise the keychain (the one stored in .gitsecret/keys/*.gpg), may
22 have changed since the last time the files were encrypted, and it´s
23 possible to create a state where the users in the output of git secret
24 whoknows may not be able to decrypt the some files in the repo, or may
25 be able decrypt files they´re not supposed to be able to.
26
27 In other words, unless you re-encrypt all the files in a repo each time
28 you ´hide´ any, it´s possible to make it so some files can no longer be
29 decrypted by users who should be (and would appear) able to decrypt
30 them, and vice-versa.
31
32 If you know what you are doing and wish to encrypt or re-encrypt only a
33 subset of the files even after reading the above paragraphs, you can
34 use the -F option to force git secret hide to skip any hidden files
35 where the unencrypted versions aren´t present.
36
37 Also, it is possible to modify the names of the encrypted files by set‐
38 ting SECRETS_EXTENSION variable.
39
40 (See git-secret(7) http://git-secret.io/git-secret for information
41 about renaming the .gitsecret folder using the SECRETS_DIR environment
42 variable.
43
45 -v - verbose, shows extra information.
46 -c - deletes encrypted files before creating new ones.
47 -F - forces hide to continue if a file to encrypt is missing.
48 -P - preserve permissions of unencrypted file in encrypted file.
49 -d - deletes unencrypted files after encryption.
50 -m - encrypt files only when modified.
51 -h - shows help.
52
53 You can also enable verbosity using the SECRETS_VERBOSE environment
54 variable, as documented at git-secret(7) http://git-secret.io/
55
57 Run man git-secret-hide to see this note.
58
60 git-secret-init(1) http://git-secret.io/git-secret-init,
61 git-secret-tell(1) http://git-secret.io/git-secret-tell,
62 git-secret-add(1) http://git-secret.io/git-secret-add,
63 git-secret-reveal(1) http://git-secret.io/git-secret-reveal,
64 git-secret-cat(1) http://git-secret.io/git-secret-cat
65
66
67
68sobolevn March 2019 GIT-SECRET-HIDE(1)