We use Fernet[1] or Ansible vault[2] with the encrypted secrets committed to the code repositories, but I guess we can do that because the code is not public.
The rest we share over a secure, company approved, channel, and save them into local KeePass-es (KeePassXC)
The rest we share over a secure, company approved, channel, and save them into local KeePass-es (KeePassXC)
[1] https://docs.ansible.com/ansible/latest/vault_guide/index.ht...
[2] https://cryptography.io/en/latest/fernet/