git-crypt

What is the recommended way of decrypting git-crypt encrypted secure files if any?

My deploy chain work with git-crypt to encrypt secrets inside the repository. No to fully test I would like to start doing this within the ci workflow.

all in all I'll need to run git-crypt unlock $symetric_key. So how would i keep $symetric_key secure?

Thanks