32 lines
859 B
Python
Executable File
32 lines
859 B
Python
Executable File
#!/usr/bin/env python3
|
|
|
|
# A little tool to encrypt/decrypt git secrets. Kinda like password-store, but more purpose specific and portable.
|
|
|
|
import sys
|
|
import subprocess
|
|
|
|
keys = [
|
|
"63DFE737F078657CC8A51C00C29ADD73B3563D82" # q3k
|
|
]
|
|
|
|
def main():
|
|
if len(sys.argv) < 3 or sys.argv[1] not in ('encrypt', 'decrypt'):
|
|
raise Exception("Usage: {} encrypt/decrypt file".format(sys.argv[0]))
|
|
|
|
action = sys.argv[1]
|
|
src = sys.argv[2]
|
|
|
|
if action == 'encrypt':
|
|
cmd = ['gpg' , '--encrypt', '--armor', '--batch', '--yes', '--output', '-']
|
|
for k in keys:
|
|
cmd.append('--recipient')
|
|
cmd.append(k)
|
|
cmd.append(src)
|
|
subprocess.check_call(cmd)
|
|
else:
|
|
cmd = ['gpg', '--decrypt', '--output', '-', src]
|
|
subprocess.check_call(cmd)
|
|
|
|
if __name__ == '__main__':
|
|
sys.exit(main() or 0)
|