GIT-SECRET-REVEAL(1)
π GIT-SECRET-REVEAL(1) π
okay bestie, welcome to the git-secret manual, version 0.5.0-alpha2 β¨ this one's all about git-secret-reveal, and it's genuinely iconic.
β¨ NAME β¨
git-secret-reveal β decrypts all added files. π
πΈ SYNOPSIS πΈ
git secret reveal [-f] [-F] [-P] [-v] [-d dir] [-p password] [pathspec]...
π DESCRIPTION π
git-secret-reveal decrypts the files you pass it, or literally every file that git-secret considers secret. no cap.
Under the hood, reveal uses the gpg --decrypt command and your private key (typically from your personal keyring in your home directory) to decrypt files. π
So for this whole operation to succeed, your personal keyring must contain a private key matching one of the public keys that were used to encrypt the secrets β i.e., one of the public keys in your repo's git-secret keyring at the time the file was encrypted. no matching key, no reveal, sorry bestie π
π OPTIONS π
-fβ forcesgpgto overwrite existing files without prompt. it's giving decisive π-Fβ forcesrevealto continue even if a file fails to decrypt. resilience era π«Ά-dβ specifies the--homediroption for thegpg, basically use this option if you store your keys in a custom location. π-vβ verbose, shows extra information. she's chatty, we love her β¨-pβ specifies password for noinput mode, adds the--passphraseoption forgpg. π€«-Pβ preserve permissions of the encrypted file in the unencrypted file. matching energy, obsessed π-hβ shows help. always here for you πΈ
π¦ ENV VARIABLES π¦
SECRETS_GPG_COMMANDchanges the defaultgpgcommand to anything else π₯SECRETS_GPG_ARMORis a boolean to enable--armormode https://www.gnupg.org/gph/en/manual/r1290.html to store secrets in text format over binary βSECRETS_DIRchanges the default.gitsecret/folder to another name as documented atgit-secret(7)https://git-secret.io/ πSECRETS_EXTENSIONchanges the default.secretfile extension πSECRETS_VERBOSEchanges the output verbosity as documented atgit-secret(7)https://git-secret.io/ πSECRETS_PINENTRYchanges thegpg --pinentrymode https://github.com/gpg/pinentry as documented atgit-secret(7)https://git-secret.io/ π§
π MANUAL π
Run man git-secret-reveal to see this document. yes, the manual tells you how to read the manual. main character energy fr fr π
π SEE ALSO π
git-secret-init(1)https://git-secret.io/git-secret-initgit-secret-cat(1)https://git-secret.io/git-secret-catgit-secret-tell(1)https://git-secret.io/git-secret-tellgit-secret-add(1)https://git-secret.io/git-secret-addgit-secret-hide(1)https://git-secret.io/git-secret-hide
shoutout to sobolevn for writing this one, and to April 2022 for the timestamp β this page is brought to you by git-secret 0.5.0-alpha2, slay π β¨
π¦ where this page comes from
- debian bookworm: git-secret 0.5.0-1 Β· MIT
- debian trixie: git-secret 0.5.0-1 Β· MIT
- fedora 43: git-secret 0.5.0-9.fc43 Β· MIT
- fedora 44: git-secret 0.5.0-10.fc44 Β· MIT
- ubuntu noble: git-secret 0.5.0-1 Β· MIT
- ubuntu questing: git-secret 0.5.0-1
- ubuntu resolute: git-secret 0.5.0-1build1 Β· MIT
- ubuntu stonking: git-secret 0.5.0-1build1 Β· MIT
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms