git-secret

git-secret encrypts and tracks files directly within git repositories, allowing secrets to be version-controlled alongside code without exposing plaintext. The README emphasizes it 'works seamlessly with git repositories.'

Adding or removing users is simple via keyring management, and secrets don't need to be re-encrypted when revoking access—just remove the key and re-encrypt. The README highlights this as a core feature.

Available through package managers like Homebrew, apt, and yum, making installation straightforward across different operating systems. The README lists these as supported installation methods.

Uses public-key encryption with PGP, reducing custom key management overhead and benefiting from established security practices. The README states it 'encrypts files with permitted users' public keys.'