git-secret
git-secret helps you keep encrypted secrets inside a Git repository without exposing plaintext values to collaborators or CI logs.
It uses GnuPG under the hood and integrates with normal Git workflows, making it practical for small teams and infrastructure repositories.