r/GitOps

▲ 8 r/GitOps+2 crossposts

Own Your Secrets - Sync cottage encrypted secrets from any repo to any device

This browser-local WASM app complements cottage cli which helps you manage age-encrypted (supports SSH RSA/ed25519 keys) secrets in you own repo.

Brower Local - All data is encryped and stored locally in your browser. It treats your git repository as the secret provider.

WASM - This app is made with Rust WASM which allows type-enforced safe secrets handling.

How it works - It looks for .age files in repo, and decrypts them with the built-in private key (assuming the secrets were encrypted with the built-in public key).

cottage-sync.github.io

u/Any-Lack-7699 — 9 days ago

▲ 40 r/GitOps+4 crossposts

Cottage is a tool for teams to manage age-encrypted secrets in git repositories.

It provides a simple workflow to encrypt/decrypt secrets, manage recipients, and keep secrets out of the repo while still allowing for easy sharing via VCS. Cottage also generates redacted previews of encrypted secrets for better visibility and supports both persistent and temporary decryption workflows, while ensuring secrets are never committed in plaintext.

u/Any-Lack-7699 — 13 days ago