[owaislone]

I've been using Blackbox and it has been great. It encrypts files directly in your VCS. We've setup the deploy pipeline to decrypt secret config files and then deploy to servers.

https://github.com/StackExchange/blackbox