Filters to prevent accidentally checking in plaintext?

[Matir]

git-crypt can be used as a filter to automatically encrypt on commit. Is there any approach like this with agebox? It feels like the current workflow makes committing secrets quite easy.

[Threnklyn]

you can run agebox verify --no-decrypt this will return a non 0 exit code so if you create a git pre-commit hook with this it should prohibit commits with unencrypted but tracked files

[fbartels]

The command I think @Threnklyn had in mind was agebox validate --no-decrypt