Assuming you mean encrypting the secret files specifically and not the whole repo. This could work, but why put the secrets in the repository at all? Either eve

Assuming you mean encrypting the secret files specifically and not the whole repo. This could work, but why put the secrets in the repository at all? Either everyone has to replace them with their own secrets before being able to run the code. Or everyone has to have the key to decrypt the actual credentials (developers, interns, deployments, CI, scanners, etc) making it not secret. Why not inject the credentials at runtime, from a system meant for this, with support for auditing and key rotation etc?