sops

sops copied to clipboard

chihero

Decrypting dotenv gives parsing time "" as "2006-01-02T15:04:05Z07:00": cannot parse "" as "2006"

2

On windows 10 with version 3.7.3 and using age: When I encrypt the .env file: `PORT=test` with the command ` sops --encrypt --age xxxxx ./config/dev/secrets.env > ./config/dev/secrets.enc.env` it gives the...

tomcoppensucll

Quotes in env formatted file are handled unexpectedly when using exec-env

2

When using `exec-env` on an env formatted file, quotes are included in the resulting environment variable. `secrets.env`: ``` secret1='foo' secret2="bar" ``` ``` $ sops exec-env secrets.env 'echo $secret1' 'foo' $...

adamhl8

The animation message stating the instructions has a spelling error .  not he keys^C--> not the keys

Amod02-prog

Would SOPS pass security auditing?

4

Hi, Would using SOPS and storing encrypted secrets in git raise any concerns during security audits such as ISO 27001, pentests, etc.?

dudicoco

... otherwise you could get something like the following (here sops is run without network connection available): ``` $ ./sops --version sops 3.7.3 [warning] failed to retrieve latest version from...

stoned

Mozilla SOPS is all fun and games until someone has to fix a merge conflict in an encrypted file 😂

4

Any guidelines for handling this... I can only think of two ways to prevent this... 1. Do trunk-based dev, so that devs are discouraged from long running branches 2. Use...

m0un10

Sort masterkeys to try offline decrypt methods first

1

This is to address #305. Sort master keys so PGP/age keys appear before the others and being used first.

bkreitch

Allow shamir_threshold: 1

3

This allows the case where multiple keygroups are used, but any one of the groups needs to be able to decrypt the secret. This is for example useful if some...

puiterwijk

Hi! Can you fix this issue. I scanned my docker image with sops installed v3.7.3 and it gives me: ``` ✗ High severity vulnerability found in gopkg.in/yaml.v3 Description: Denial of...

vinisman