---
name: "git-secret-reveal"
section: "1"
platform: "linux"
package: "git-secret"
version: "0.5.0-1"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/git-secret-reveal"
---

# git-secret-reveal(1)

decrypts all added files.

## NAME

**git-secret-reveal** - decrypts all added files.

## SYNOPSIS

```
git secret reveal [-f] [-F] [-P] [-v] [-d dir] [-p password] [pathspec]...
```

## DESCRIPTION

**git-secret-reveal** - decrypts passed files, or all files considered secret by **git-secret**.

Under the hood, **reveal** uses the **gpg --decrypt** command and your private key (typically from your personal keyring in your home directory) to *decrypt* files.

Therefore, for this operation to succeed, your personal keyring must contain a private key matching one of the public keys which were used to encrypt the secrets -- i.e., one of the public keys in your repo´s **git-secret** keyring when the file was encrypted.

## OPTIONS

```
-f  - forces gpg to overwrite existing files without prompt.
-F  - forces reveal to continue even if a file fails to decrypt.
-d  - specifies `--homedir` option for the `gpg`, basically use this option if you store your keys in a custom location.
-v  - verbose, shows extra information.
-p  - specifies password for noinput mode, adds `--passphrase` option for `gpg`.
-P  - preserve permissions of encrypted file in unencrypted file.
-h  - shows help.
```

## ENV VARIABLES

- •

  **SECRETS\_GPG\_COMMAND** changes the default **gpg** command to anything else

- •

  **SECRETS\_GPG\_ARMOR** is a boolean to enable **--armor** mode *https://www.gnupg.org/gph/en/manual/r1290.html* to store secrets in text format over binary

- •

  **SECRETS\_DIR** changes the default **.gitsecret/** folder to another name as documented at [git-secret(7)](/git-secret/7.md) *https://git-secret.io/*

- •

  **SECRETS\_EXTENSION** changes the default **.secret** file extension

- •

  **SECRETS\_VERBOSE** changes the output verbosity as documented at [git-secret(7)](/git-secret/7.md) *https://git-secret.io/*

- •

  **SECRETS\_PINENTRY** changes the **gpg --pinentry** mode *https://github.com/gpg/pinentry* as documented at [git-secret(7)](/git-secret/7.md) *https://git-secret.io/*

-

  ## MANUAL

Run **man git-secret-reveal** to see this document.

## SEE ALSO

[git-secret-init(1)](/git-secret-init/1.md) *https://git-secret.io/git-secret-init*, [git-secret-cat(1)](/git-secret-cat/1.md) *https://git-secret.io/git-secret-cat*, [git-secret-tell(1)](/git-secret-tell/1.md) *https://git-secret.io/git-secret-tell*, [git-secret-add(1)](/git-secret-add/1.md) *https://git-secret.io/git-secret-add*, [git-secret-hide(1)](/git-secret-hide/1.md) *https://git-secret.io/git-secret-hide*