9 Likes
Another alternative I use is selectively putting such secrets into git-annex. This is much like the git-crypt approach but less intrusive and without the git-crypt drawbacks (no unlock neseccary etc.)
2 Likes