HN Showcase
Back to browse
GitHub Repository

A modern git based age-encrypted secrets manager for teams.

41 starsRust

A modern Git based age-encrypted secrets manager for teams

by sayanarijit·May 3, 2026·2 points·1 comment
Visit ProjectView on HN

AI Analysis

●●SolidSolve My ProblemCozy

Temporary decryption with ctg run deletes plaintext after command, unlike sops or git-crypt.

Strengths
  • •ctg run decrypts secrets temporarily and deletes them regardless of command success or failure
  • •Redacted previews with timestamps and checksums prevent tampering and improve visibility
  • •Supports Jujutsu (jj) repos, not just Git, for version-control-agnostic secret stores
Weaknesses
  • •Competes with established tools like sops, git-crypt, and agebox in a crowded category
  • •Early stage with only 6 stars and no forks yet
Target Audience

Development teams managing secrets in version control

Similar To

sops · git-crypt · agebox

Post Description

Cottage is a secrets manager that teams can use to do more than encrypt and share secrets.

It falls in the same category of agebox, blackbox, sops, git-crypt, but has a friendlier interface and differs is some opinion.

* Stores encrypted secrets with .age extension so that it can be integrated with an wider ecosystem of tooling.

* Separate metadata with checksums and previews with values redated with timestamps for better visibility.

* Automatically adds secrets to .gitignore if present.

* Single command to manage all secrets in repo.

* Supports persistent decryption workflow (plaintext secrets are deleted after operation): encrypt, decrypt, edit, sync, status, diff, clean

* Supports temporary decryption workflow (plaintext secrets are deleted after operation): run, edit --clean, encrypt --clean

* Supports jj and non .git repositories.

* Optimised for teams: my keeping public keys in the repo, admins can grant and revoke access to team members.

Similar Projects