Doubts

[vylum]

I like the idea, but when you have the repo and public key, it seems to me you are able to do am offline dictionary or brute-force attack and compare sealed value?

[mkmik]

each value is encrypted using a random session key (aka nonce)

You can read more in https://github.com/bitnami-labs/sealed-secrets/blob/main/docs/crypto.md