sops
sops copied to clipboard
getsops
Simple and flexible tool for managing secrets
Hello everyone; I found a bug in the SOPS encryption, which you can replicate yourself. Unencrypted file `test.yaml`: ```yaml this: is: an: example # comment ``` I use age encryption,...
Here is a test yaml file: ``` hello: hello2: - sops: value sops2: sops3: value ``` Encrypt it with SOPS: ``` sops -e test.yaml hello: hello2: - sops: ENC[AES256_GCM,data:rLOq/m0=,iv:e02zP+IuYoHdh6y5l13Lmd/Csh1zjgQ1v5tGjzLsyEA=,tag:iIobTHf40HkgtUO2ep5hOQ==,type:str]...
I would like a way to support a one-way encryption scheme more seamless than currently possible. Here is the scenario I'm proposing: I have a KMS service I have a...
Were added to upstream via https://github.com/urfave/cli/pull/808 in their 1.22.0 release. i.e. need to bump https://github.com/mozilla/sops/blob/v3.7.3/go.mod Downstream bug report: https://bugs.archlinux.org/task/70588#comment206728
Hello, If I type `sops updateKeys some-file.yaml` instead of `sops updatekeys some-file.yaml`, I get the following error message: `error loading config: no matching creation rules found`. The problem here is...
Our use case is more that we have a YAML file with many settings, where only few of them have to be encrypted. We want to store that file in...
SOPS (AWS KMS) in Gitlab CI pipeline: Failed to get the data key required to decrypt the SOPS file.
I have the following set up to use SOPS AWS KMS decryption: ``` ~/.aws/credentials: [default] aws_access_key_id = ******* aws_secret_access_key = ******** ~/.aws/config: [profile secrets-editor] region = us-west-2 output = json...
In china, when I want to encrypt with --kms "KMS_ARN+ROLE_ARN" option as explain in https://github.com/mozilla/sops#assuming-roles-and-using-kms-in-various-aws-accounts, I obtain invalid ARN. I think the problem comes from the arn in china is...
On Windows 10, trying to encrypt a `.env` file that contains empty lines results in the following error message: ```Error unmarshalling file: invalid dotenv input line:``` Output of `sops --version`:...
