[twic]

What i do is not put secrets in files in my source tree. If secrets have to go in files, they go in files somewhere well clear of any source control tool.

[cardmagic]

I built an e2e encrypted cloud service for secrets in case you’re interested in trying it: https://cloudenv.com