cici

https://github.com/levibostian/cici

When environment variables are not enough and you need to store secrets within files, cici is your friend. Store secret files in your source code repository with ease. Can be used without a CI server, but tool is primarily designed for your CI server to decrypt these secret files for deployment.