It&#x27;s a bad practice, because git makes keys practically irrevocable. It&#x27;s not enough to rotate encryption keys, because the old ciphertexts are in the git history; you have to rotate the underlying secrets as well (people don&#x27;t do this and shouldn&#x27;t have to).<p>Don&#x27;t store encrypted secrets in git if you can avoid it.