Bitbucket Git Crypt Pipe

Decrypts git-crypt encrypted repositories in Bitbucket Pipelines.

YAML Definition

Add the following snippet to the script section of your bitbucket-pipelines.yml file:

script:
  - pipe: docker://tomerh2001/git-crypt-pipe:latest
    variables:
      SECRETS_KEY: $SECRETS_KEY
      # GIT_STASH: 'true' # Optional

Variables

| Name | Usage | Type | |--------------|----------------------------------------------|----------| | SECRETS_KEY| The base64 encoded git-crypt key. | Mandatory| | GIT_STASH| When true, runs git stash before decrypting, and git stash apply after. | Optional|

Details

This pipe is built to help you decrypt files in your git repository encrypted using git-crypt during a Bitbucket Pipeline run. Ensure that you have git-crypt setup properly in your repository before using this pipe.

Prerequisites

• You must have your repository encrypted with git-crypt.
• A base64 encoded git-crypt key stored in your Bitbucket Pipelines environment variables as SECRETS_KEY.