下 git-secret：在 Git 存储库中加密和存储密钥 _生活百科

在之前的文章中（点击此处查看上一篇文章），我们了解了如何识别包含密钥的文件，将密钥添加到 .gitignore ，通过 git-secret 进行加密，以及将加密文件提交到存储库。在本篇文章中，将带你了解如何在 Docker 容器中设置 git-secret 和 gpg，通过 Makefile recipe 为不同的场景创建工作流。
Makefile Adjustment将 git-secret 和 gpg 指令添加到 Makefile 中 .make/01-00-application-setup.mk：
# File: .make/01-00-application-setup.mk#...# gpgDEFAULT_SECRET_GPG_KEY?=secret.gpgDEFAULT_PUBLIC_GPG_KEYS?=.dev/gpg-keys/*.PHONY: gpggpg: ## Run gpg commands. Specify the command e.g. via ARGS="--list-keys"$(EXECUTE_IN_APPLICATION_CONTAINER) gpg $(ARGS).PHONY: gpg-export-public-keygpg-export-public-key: ## Export a gpg public key e.g. via EMAIL="john.doe@example.com" PATH=".dev/gpg-keys/john-public.gpg"@$(if $(PATH),,$(error PATH is undefined))@$(if $(EMAIL),,$(error EMAIL is undefined))"$(MAKE)" -s gpg ARGS="gpg --armor --export $(EMAIL) > $(PATH)".PHONY: gpg-export-private-keygpg-export-private-key: ## Export a gpg private key e.g. via EMAIL="john.doe@example.com" PATH="secret.gpg"@$(if $(PATH),,$(error PATH is undefined))@$(if $(EMAIL),,$(error EMAIL is undefined))"$(MAKE)" -s gpg ARGS="--output $(PATH) --armor --export-secret-key $(EMAIL)".PHONY: gpg-importgpg-import: ## Import a gpg key file e.g. via GPG_KEY_FILES="/path/to/file /path/to/file2"@$(if $(GPG_KEY_FILES),,$(error GPG_KEY_FILES is undefined))"$(MAKE)" -s gpg ARGS="--import --batch --yes --pinentry-mode loopback $(GPG_KEY_FILES)".PHONY: gpg-import-default-secret-keygpg-import-default-secret-key: ## Import the default secret key"$(MAKE)" -s gpg-import GPG_KEY_FILES="$(DEFAULT_SECRET_GPG_KEY)".PHONY: gpg-import-default-public-keysgpg-import-default-public-keys: ## Import the default public keys"$(MAKE)" -s gpg-import GPG_KEY_FILES="$(DEFAULT_PUBLIC_GPG_KEYS)" .PHONY: gpg-initgpg-init: gpg-import-default-secret-key gpg-import-default-public-keys ## Initialize gpg in the container, i.e. import all public and private keys# git-secret.PHONY: git-secretgit-secret: ## Run git-secret commands. Specify the command e.g. via ARGS="hide"$(EXECUTE_IN_APPLICATION_CONTAINER) git-secret $(ARGS).PHONY: secret-initsecret-init: ## Initialize git-secret in the repository via `git-secret init`"$(MAKE)" -s git-secret ARGS="init".PHONY: secret-init-gpg-socket-configsecret-init-gpg-socket-config: ## Initialize the config files to change the gpg socket locationsecho "%Assuan%" > .gitsecret/keys/S.gpg-agentecho "socket=/tmp/S.gpg-agent" >> .gitsecret/keys/S.gpg-agentecho "%Assuan%" > .gitsecret/keys/S.gpg-agent.sshecho "socket=/tmp/S.gpg-agent.ssh" >> .gitsecret/keys/S.gpg-agent.sshecho "extra-socket /tmp/S.gpg-agent.extra" > .gitsecret/keys/gpg-agent.confecho "browser-socket /tmp/S.gpg-agent.browser" >> .gitsecret/keys/gpg-agent.conf.PHONY: secret-encryptsecret-encrypt: ## Decrypt secret files via `git-secret hide`"$(MAKE)" -s git-secret ARGS="hide".PHONY: secret-decryptsecret-decrypt: ## Decrypt secret files via `git-secret reveal -f`"$(MAKE)" -s git-secret ARGS="reveal -f" .PHONY: secret-decrypt-with-passwordsecret-decrypt-with-password: ## Decrypt secret files using a password for gpg via `git-secret reveal -f -p $(GPG_PASSWORD)`@$(if $(GPG_PASSWORD),,$(error GPG_PASSWORD is undefined))"$(MAKE)" -s git-secret ARGS="reveal -f -p $(GPG_PASSWORD)" .PHONY: secret-addsecret-add: ## Add a file to git secret via `git-secret add $FILE`@$(if $(FILE),,$(error FILE is undefined))"$(MAKE)" -s git-secret ARGS="add $(FILE)".PHONY: secret-catsecret-cat: ## Show the contents of file to git secret via `git-secret cat $FILE`@$(if $(FILE),,$(error FILE is undefined))"$(MAKE)" -s git-secret ARGS="cat $(FILE)".PHONY: secret-listsecret-list: ## List all files added to git secret `git-secret list`"$(MAKE)" -s git-secret ARGS="list".PHONY: secret-removesecret-remove: ## Remove a file from git secret via `git-secret remove $FILE`@$(if $(FILE),,$(error FILE is undefined))"$(MAKE)" -s git-secret ARGS="remove $(FILE)".PHONY: secret-add-usersecret-add-user: ## Remove a user from git secret via `git-secret tell $EMAIL`@$(if $(EMAIL),,$(error EMAIL is undefined))"$(MAKE)" -s git-secret ARGS="tell $(EMAIL)".PHONY: secret-show-userssecret-show-users: ## Show all users that have access to git secret via `git-secret whoknows`"$(MAKE)" -s git-secret ARGS="whoknows".PHONY: secret-remove-usersecret-remove-user: ## Remove a user from git secret via `git-secret killperson $EMAIL`@$(if $(EMAIL),,$(error EMAIL is undefined))"$(MAKE)" -s git-secret ARGS="killperson $(EMAIL)".PHONY: secret-diffsecret-diff: ## Show the diff between the content of encrypted and decrypted files via `git-secret changes`"$(MAKE)" -s git-secret ARGS="changes"工作流程使用 git-secret 非常简单：

下 git-secret：在 Git 存储库中加密和存储密钥

推荐阅读

母亲节要买什么礼物,分享几款走心的

关于本玉12号简述本玉12号

蓝牙耳机使用小技巧蓝牙耳机的正确使用方法

宝马有什么技术

诗歌鉴赏蜀相咏史怀古诗蜀相的作者

白煮牛肉的家常做法大全白煮牛肉的家常做法

怎么去胶？

抗皱六胜肽精华液的使用方法六胜肽抗皱精华液使用方法

糖不甩怎么做才Q

开元通宝680万图片 &#8211; 开元通宝2020价格

越狱第3季中第几集越狱成功？

梦见下牙掉了,但没流血是什么意思

汽车贴膜前需要洗车吗汽车贴膜前要洗车吗?

双子座的床上功夫

手机无响应的解决方法应该怎么解决呢

猫咪渴了的表现

金鱼眼面相解析，有金鱼眼的人运势怎么样

2022年护士年终工作总结 2022美工个人年终工作总结

瘦麒麟臂方法瘦胳膊最有效的方法

形容经历了事情的成语是什么