Script to pull latest version of a repo and decrypt any files containing sensitive information for ease of use locally.

deobfuscating-pull.sh

#!/bin/dash
echo "[INFO] Updating repository to latest version..."
git pull

echo "[INFO] Deobfuscating password files..."
find . -type f -name "*.pass.asc" | gpg --yes --decrypt-files

# Gets the number of files in the current directory + subdirectories that have a certain extension.
ASC=`find . -type f -name "*.asc" | wc -l`
PASS=`find . -type f -name "*.pass" | wc -l`

# checking that all the encrypted files yielded an unencrypted one before deleting encrypted version.
if [ "$ASC" = "$PASS" ]; then
    echo "[INFO] Password files decrypted correctly"

    # Deleting files after decryption
    echo "[INFO] Cleaning up..."
    find . -type f -name "*.asc" -exec shred -u {} \ ;
else
    echo "[ERROR] Not all files decrypted, something went wrong."
    echo "[INFO] Check files manually. Aborting..."
fi
echo "[INFO] Done."