10 Likes
Another alternative I use is selectively putting such secrets into git-annex. This is much like the git-crypt approach but less intrusive and without the git-crypt drawbacks (no unlock necessary etc.)
3 Likes