AGWA / git-crypt

Transparent file encryption in git
https://www.agwa.name/projects/git-crypt/
GNU General Public License v3.0
8.32k stars 479 forks source link

unlock only possible via file #116

Open basz opened 7 years ago

basz commented 7 years ago

would it be an idea to be able to encrypt via environment variables?

git-crypt unlock $GITCRYPT_SYMETRIC_KEY

Now that gitlab-ci is able properly secure these, "Secret Variables; These variables will be set to environment by the runner. So you can use them for passwords, secret keys or whatever you want."

Now, I store them as base64 encoded in the var

echo $GITCRYPT_SYMETRICKEY_PATH > .git-crypt-base64.key && \ 
openssl base64 -d -in .git-crypt-base64.key -out .git-crypt.key && \
git-crypt unlock .git-crypt.key \
&& rm .git-crypt*.key
aaronjensen commented 7 years ago

Would this work:

git-crypt unlock <(echo $GITCRYPT_SYMETRIC_KEY | base64 --decode)
IvanSorokin commented 5 years ago

@aaronjensen could you help me to achieve this using windows powershell?

aaronjensen commented 5 years ago

@IvanSorokin No, I'm sorry. You'll need to talk to someone who is proficient with powershell, which I am not.