I believe git-secret[0] does what you describe. The author of Lunar[1] uses it to hide the private elements in a public repo.

[0]: https://sobolevn.me/git-secret/

[1]: https://github.com/alin23/Lunar/