| route-pattern | /:user_id/:repository |
| route-controller | files |
| route-action | disambiguate |
| fetch-nonce | v2:330f129c-b4e3-0431-8ddd-38b09b75e789 |
| current-catalog-service-hash | f3abb0cc802f3d7b95fc8762b94bdcb13bf39634c40c357301c4aa1d67a256fb |
| request-id | 8886:24854:291F66:360DD4:69647859 |
| html-safe-nonce | ec4a6dd95284bc3da94e1eab35199c7acab2722eba80effe11c6ad6e844e2c4f |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI4ODg2OjI0ODU0OjI5MUY2NjozNjBERDQ6Njk2NDc4NTkiLCJ2aXNpdG9yX2lkIjoiNDcxODU0MDEwNzgyNTgzODE2OSIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9 |
| visitor-hmac | 8b05bf809307d448cef7c37f80ec7754b8ff458a040da75e46bb42a1aa75bd37 |
| hovercard-subject-tag | repository:40684033 |
| github-keyboard-shortcuts | repository,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | // |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/getsops/sops |
| twitter:image | https://opengraph.githubassets.com/317c4f1d8f3b445ae5b9a01ad2f424a93507ff036e9abfd840773743cb4bf14c/getsops/sops |
| twitter:card | summary_large_image |
| og:image | https://opengraph.githubassets.com/317c4f1d8f3b445ae5b9a01ad2f424a93507ff036e9abfd840773743cb4bf14c/getsops/sops |
| og:image:alt | Simple and flexible tool for managing secrets. Contribute to getsops/sops development by creating an account on GitHub. |
| og:image:width | 1200 |
| og:image:height | 600 |
| og:site_name | GitHub |
| og:type | object |
| hostname | github.com |
| expected-hostname | github.com |
| None | baa7d9900fdf7b27d604f36887af878d569cfbdcf97126832a5f4f0caf0c6ba5 |
| turbo-cache-control | no-preview |
| go-import | github.com/getsops/sops git https://github.com/getsops/sops.git |
| octolytics-dimension-user_id | 129185620 |
| octolytics-dimension-user_login | getsops |
| octolytics-dimension-repository_id | 40684033 |
| octolytics-dimension-repository_nwo | getsops/sops |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 40684033 |
| octolytics-dimension-repository_network_root_nwo | getsops/sops |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 842eff1d11f899d02b6b3b98fa3ea4860e64b34e |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
| Skip to content | https://github.com/getsops/sops#start-of-content |
|
| https://github.com/ |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgetsops%2Fsops |
| GitHub CopilotWrite better code with AI | https://github.com/features/copilot |
| GitHub SparkBuild and deploy intelligent apps | https://github.com/features/spark |
| GitHub ModelsManage and compare prompts | https://github.com/features/models |
| MCP RegistryNewIntegrate external tools | https://github.com/mcp |
| ActionsAutomate any workflow | https://github.com/features/actions |
| CodespacesInstant dev environments | https://github.com/features/codespaces |
| IssuesPlan and track work | https://github.com/features/issues |
| Code ReviewManage code changes | https://github.com/features/code-review |
| GitHub Advanced SecurityFind and fix vulnerabilities | https://github.com/security/advanced-security |
| Code securitySecure your code as you build | https://github.com/security/advanced-security/code-security |
| Secret protectionStop leaks before they start | https://github.com/security/advanced-security/secret-protection |
| Why GitHub | https://github.com/why-github |
| Documentation | https://docs.github.com |
| Blog | https://github.blog |
| Changelog | https://github.blog/changelog |
| Marketplace | https://github.com/marketplace |
| View all features | https://github.com/features |
| Enterprises | https://github.com/enterprise |
| Small and medium teams | https://github.com/team |
| Startups | https://github.com/enterprise/startups |
| Nonprofits | https://github.com/solutions/industry/nonprofits |
| App Modernization | https://github.com/solutions/use-case/app-modernization |
| DevSecOps | https://github.com/solutions/use-case/devsecops |
| DevOps | https://github.com/solutions/use-case/devops |
| CI/CD | https://github.com/solutions/use-case/ci-cd |
| View all use cases | https://github.com/solutions/use-case |
| Healthcare | https://github.com/solutions/industry/healthcare |
| Financial services | https://github.com/solutions/industry/financial-services |
| Manufacturing | https://github.com/solutions/industry/manufacturing |
| Government | https://github.com/solutions/industry/government |
| View all industries | https://github.com/solutions/industry |
| View all solutions | https://github.com/solutions |
| AI | https://github.com/resources/articles?topic=ai |
| Software Development | https://github.com/resources/articles?topic=software-development |
| DevOps | https://github.com/resources/articles?topic=devops |
| Security | https://github.com/resources/articles?topic=security |
| View all topics | https://github.com/resources/articles |
| Customer stories | https://github.com/customer-stories |
| Events & webinars | https://github.com/resources/events |
| Ebooks & reports | https://github.com/resources/whitepapers |
| Business insights | https://github.com/solutions/executive-insights |
| GitHub Skills | https://skills.github.com |
| Documentation | https://docs.github.com |
| Customer support | https://support.github.com |
| Community forum | https://github.com/orgs/community/discussions |
| Trust center | https://github.com/trust-center |
| Partners | https://github.com/partners |
| GitHub SponsorsFund open source developers | https://github.com/sponsors |
| Security Lab | https://securitylab.github.com |
| Maintainer Community | https://maintainers.github.com |
| Accelerator | https://github.com/accelerator |
| Archive Program | https://archiveprogram.github.com |
| Topics | https://github.com/topics |
| Trending | https://github.com/trending |
| Collections | https://github.com/collections |
| Enterprise platformAI-powered developer platform | https://github.com/enterprise |
| GitHub Advanced SecurityEnterprise-grade security features | https://github.com/security/advanced-security |
| Copilot for BusinessEnterprise-grade AI features | https://github.com/features/copilot/copilot-business |
| Premium SupportEnterprise-grade 24/7 support | https://github.com/premium-support |
| Pricing | https://github.com/pricing |
| Search syntax tips | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
| documentation | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgetsops%2Fsops |
|
Sign up
| https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E&source=header-repo&source_repo=getsops%2Fsops |
| Reload | https://github.com/getsops/sops |
| Reload | https://github.com/getsops/sops |
| Reload | https://github.com/getsops/sops |
|
getsops
| https://github.com/getsops |
| sops | https://github.com/getsops/sops |
|
Notifications
| https://github.com/login?return_to=%2Fgetsops%2Fsops |
|
Fork
1k
| https://github.com/login?return_to=%2Fgetsops%2Fsops |
|
Star
20.4k
| https://github.com/login?return_to=%2Fgetsops%2Fsops |
| getsops.io/ | https://getsops.io/ |
|
MPL-2.0 license
| https://github.com/getsops/sops/blob/main/LICENSE |
|
20.4k
stars
| https://github.com/getsops/sops/stargazers |
|
1k
forks
| https://github.com/getsops/sops/forks |
|
Branches
| https://github.com/getsops/sops/branches |
|
Tags
| https://github.com/getsops/sops/tags |
|
Activity
| https://github.com/getsops/sops/activity |
|
Star
| https://github.com/login?return_to=%2Fgetsops%2Fsops |
|
Notifications
| https://github.com/login?return_to=%2Fgetsops%2Fsops |
|
Code
| https://github.com/getsops/sops |
|
Issues
361
| https://github.com/getsops/sops/issues |
|
Pull requests
51
| https://github.com/getsops/sops/pulls |
|
Discussions
| https://github.com/getsops/sops/discussions |
|
Actions
| https://github.com/getsops/sops/actions |
|
Security
Uh oh!
There was an error while loading. Please reload this page.
| https://github.com/getsops/sops/security |
| Please reload this page | https://github.com/getsops/sops |
|
Insights
| https://github.com/getsops/sops/pulse |
|
Code
| https://github.com/getsops/sops |
|
Issues
| https://github.com/getsops/sops/issues |
|
Pull requests
| https://github.com/getsops/sops/pulls |
|
Discussions
| https://github.com/getsops/sops/discussions |
|
Actions
| https://github.com/getsops/sops/actions |
|
Security
| https://github.com/getsops/sops/security |
|
Insights
| https://github.com/getsops/sops/pulse |
| Branches | https://github.com/getsops/sops/branches |
| Tags | https://github.com/getsops/sops/tags |
| https://github.com/getsops/sops/branches |
| https://github.com/getsops/sops/tags |
| 2,385 Commits | https://github.com/getsops/sops/commits/main/ |
| https://github.com/getsops/sops/commits/main/ |
| .github | https://github.com/getsops/sops/tree/main/.github |
| .github | https://github.com/getsops/sops/tree/main/.github |
| .release | https://github.com/getsops/sops/tree/main/.release |
| .release | https://github.com/getsops/sops/tree/main/.release |
| aes | https://github.com/getsops/sops/tree/main/aes |
| aes | https://github.com/getsops/sops/tree/main/aes |
| age | https://github.com/getsops/sops/tree/main/age |
| age | https://github.com/getsops/sops/tree/main/age |
| audit | https://github.com/getsops/sops/tree/main/audit |
| audit | https://github.com/getsops/sops/tree/main/audit |
| azkv | https://github.com/getsops/sops/tree/main/azkv |
| azkv | https://github.com/getsops/sops/tree/main/azkv |
| cmd/sops | https://github.com/getsops/sops/tree/main/cmd/sops |
| cmd/sops | https://github.com/getsops/sops/tree/main/cmd/sops |
| config | https://github.com/getsops/sops/tree/main/config |
| config | https://github.com/getsops/sops/tree/main/config |
| decrypt | https://github.com/getsops/sops/tree/main/decrypt |
| decrypt | https://github.com/getsops/sops/tree/main/decrypt |
| docs | https://github.com/getsops/sops/tree/main/docs |
| docs | https://github.com/getsops/sops/tree/main/docs |
| examples | https://github.com/getsops/sops/tree/main/examples |
| examples | https://github.com/getsops/sops/tree/main/examples |
| functional-tests | https://github.com/getsops/sops/tree/main/functional-tests |
| functional-tests | https://github.com/getsops/sops/tree/main/functional-tests |
| gcpkms | https://github.com/getsops/sops/tree/main/gcpkms |
| gcpkms | https://github.com/getsops/sops/tree/main/gcpkms |
| hckms | https://github.com/getsops/sops/tree/main/hckms |
| hckms | https://github.com/getsops/sops/tree/main/hckms |
| hcvault | https://github.com/getsops/sops/tree/main/hcvault |
| hcvault | https://github.com/getsops/sops/tree/main/hcvault |
| keys | https://github.com/getsops/sops/tree/main/keys |
| keys | https://github.com/getsops/sops/tree/main/keys |
| keyservice | https://github.com/getsops/sops/tree/main/keyservice |
| keyservice | https://github.com/getsops/sops/tree/main/keyservice |
| kms | https://github.com/getsops/sops/tree/main/kms |
| kms | https://github.com/getsops/sops/tree/main/kms |
| logging | https://github.com/getsops/sops/tree/main/logging |
| logging | https://github.com/getsops/sops/tree/main/logging |
| pgp | https://github.com/getsops/sops/tree/main/pgp |
| pgp | https://github.com/getsops/sops/tree/main/pgp |
| publish | https://github.com/getsops/sops/tree/main/publish |
| publish | https://github.com/getsops/sops/tree/main/publish |
| shamir | https://github.com/getsops/sops/tree/main/shamir |
| shamir | https://github.com/getsops/sops/tree/main/shamir |
| stores | https://github.com/getsops/sops/tree/main/stores |
| stores | https://github.com/getsops/sops/tree/main/stores |
| version | https://github.com/getsops/sops/tree/main/version |
| version | https://github.com/getsops/sops/tree/main/version |
| .git-blame-ignore-revs | https://github.com/getsops/sops/blob/main/.git-blame-ignore-revs |
| .git-blame-ignore-revs | https://github.com/getsops/sops/blob/main/.git-blame-ignore-revs |
| .gitignore | https://github.com/getsops/sops/blob/main/.gitignore |
| .gitignore | https://github.com/getsops/sops/blob/main/.gitignore |
| .goreleaser.yaml | https://github.com/getsops/sops/blob/main/.goreleaser.yaml |
| .goreleaser.yaml | https://github.com/getsops/sops/blob/main/.goreleaser.yaml |
| .sops.yaml | https://github.com/getsops/sops/blob/main/.sops.yaml |
| .sops.yaml | https://github.com/getsops/sops/blob/main/.sops.yaml |
| CHANGELOG.md | https://github.com/getsops/sops/blob/main/CHANGELOG.md |
| CHANGELOG.md | https://github.com/getsops/sops/blob/main/CHANGELOG.md |
| CHANGELOG.rst | https://github.com/getsops/sops/blob/main/CHANGELOG.rst |
| CHANGELOG.rst | https://github.com/getsops/sops/blob/main/CHANGELOG.rst |
| CODE_OF_CONDUCT.md | https://github.com/getsops/sops/blob/main/CODE_OF_CONDUCT.md |
| CODE_OF_CONDUCT.md | https://github.com/getsops/sops/blob/main/CODE_OF_CONDUCT.md |
| CONTRIBUTING.md | https://github.com/getsops/sops/blob/main/CONTRIBUTING.md |
| CONTRIBUTING.md | https://github.com/getsops/sops/blob/main/CONTRIBUTING.md |
| DCO | https://github.com/getsops/sops/blob/main/DCO |
| DCO | https://github.com/getsops/sops/blob/main/DCO |
| LICENSE | https://github.com/getsops/sops/blob/main/LICENSE |
| LICENSE | https://github.com/getsops/sops/blob/main/LICENSE |
| Makefile | https://github.com/getsops/sops/blob/main/Makefile |
| Makefile | https://github.com/getsops/sops/blob/main/Makefile |
| README.rst | https://github.com/getsops/sops/blob/main/README.rst |
| README.rst | https://github.com/getsops/sops/blob/main/README.rst |
| example.ini | https://github.com/getsops/sops/blob/main/example.ini |
| example.ini | https://github.com/getsops/sops/blob/main/example.ini |
| example.json | https://github.com/getsops/sops/blob/main/example.json |
| example.json | https://github.com/getsops/sops/blob/main/example.json |
| example.txt | https://github.com/getsops/sops/blob/main/example.txt |
| example.txt | https://github.com/getsops/sops/blob/main/example.txt |
| example.yaml | https://github.com/getsops/sops/blob/main/example.yaml |
| example.yaml | https://github.com/getsops/sops/blob/main/example.yaml |
| go.mod | https://github.com/getsops/sops/blob/main/go.mod |
| go.mod | https://github.com/getsops/sops/blob/main/go.mod |
| go.sum | https://github.com/getsops/sops/blob/main/go.sum |
| go.sum | https://github.com/getsops/sops/blob/main/go.sum |
| rust-toolchain.toml | https://github.com/getsops/sops/blob/main/rust-toolchain.toml |
| rust-toolchain.toml | https://github.com/getsops/sops/blob/main/rust-toolchain.toml |
| sops.go | https://github.com/getsops/sops/blob/main/sops.go |
| sops.go | https://github.com/getsops/sops/blob/main/sops.go |
| sops_test.go | https://github.com/getsops/sops/blob/main/sops_test.go |
| sops_test.go | https://github.com/getsops/sops/blob/main/sops_test.go |
| usererrors.go | https://github.com/getsops/sops/blob/main/usererrors.go |
| usererrors.go | https://github.com/getsops/sops/blob/main/usererrors.go |
| README | https://github.com/getsops/sops |
| Code of conduct | https://github.com/getsops/sops |
| Contributing | https://github.com/getsops/sops |
| MPL-2.0 license | https://github.com/getsops/sops |
| https://github.com/getsops/sops#sops-secrets-operations |
| demo | https://www.youtube.com/watch?v=YTEVyLXFiq0 |
| https://camo.githubusercontent.com/31bb43eec8e22806cebc5053236309bb450186a57929c9ec2aac6980f25fda37/68747470733a2f2f692e696d6775722e636f6d2f5830544d354e492e676966 |
|
| https://pkg.go.dev/github.com/getsops/sops/v3 |
| 1 Download | https://github.com/getsops/sops#id2 |
| https://github.com/getsops/sops#1download |
| 1.1 Stable release | https://github.com/getsops/sops#id3 |
| https://github.com/getsops/sops#11stable-release |
| https://github.com/getsops/sops/releases | https://github.com/getsops/sops/releases |
| 1.2 Development branch | https://github.com/getsops/sops#id4 |
| https://github.com/getsops/sops#12development-branch |
| decrypt package | https://pkg.go.dev/github.com/getsops/sops/v3/decrypt |
| 1 Download | https://github.com/getsops/sops#download |
| 1.1 Stable release | https://github.com/getsops/sops#stable-release |
| 1.2 Development branch | https://github.com/getsops/sops#development-branch |
| 2 Usage | https://github.com/getsops/sops#usage |
| 2.1 Test with the dev PGP key | https://github.com/getsops/sops#test-with-the-dev-pgp-key |
| 2.2 Encrypting with GnuPG subkeys | https://github.com/getsops/sops#encrypting-with-gnupg-subkeys |
| 2.3 Encrypting using age | https://github.com/getsops/sops#encrypting-using-age |
| 2.4 Encrypting using GCP KMS | https://github.com/getsops/sops#encrypting-using-gcp-kms |
| 2.5 Encrypting using Azure Key Vault | https://github.com/getsops/sops#encrypting-using-azure-key-vault |
| 2.6 Encrypting and decrypting from other programs | https://github.com/getsops/sops#encrypting-and-decrypting-from-other-programs |
| 2.7 Encrypting using Hashicorp Vault | https://github.com/getsops/sops#encrypting-using-hashicorp-vault |
| 2.8 Encrypting using HuaweiCloud KMS | https://github.com/getsops/sops#encrypting-using-huaweicloud-kms |
| 2.9 Adding and removing keys | https://github.com/getsops/sops#adding-and-removing-keys |
| 2.9.1 updatekeys command | https://github.com/getsops/sops#updatekeys-command |
| 2.9.2 rotate command | https://github.com/getsops/sops#rotate-command |
| 2.9.3 Direct Editing | https://github.com/getsops/sops#direct-editing |
| 2.10 KMS AWS Profiles | https://github.com/getsops/sops#kms-aws-profiles |
| 2.11 Assuming roles and using KMS in various AWS accounts | https://github.com/getsops/sops#assuming-roles-and-using-kms-in-various-aws-accounts |
| 2.12 AWS KMS Encryption Context | https://github.com/getsops/sops#aws-kms-encryption-context |
| 2.13 Key Rotation | https://github.com/getsops/sops#key-rotation |
| 2.14 Using .sops.yaml conf to select KMS, PGP and age for new files | https://github.com/getsops/sops#using-sops-yaml-conf-to-select-kms-pgp-and-age-for-new-files |
| 2.15 Specify a different GPG executable | https://github.com/getsops/sops#specify-a-different-gpg-executable |
| 2.16 Key groups | https://github.com/getsops/sops#key-groups |
| 2.17 Key service | https://github.com/getsops/sops#key-service |
| 2.18 Auditing | https://github.com/getsops/sops#auditing |
| 2.19 Saving Output to a File | https://github.com/getsops/sops#saving-output-to-a-file |
| 2.20 Passing Secrets to Other Processes | https://github.com/getsops/sops#passing-secrets-to-other-processes |
| 2.21 Using the publish command | https://github.com/getsops/sops#using-the-publish-command |
| 2.21.1 Publishing to Vault | https://github.com/getsops/sops#publishing-to-vault |
| 3 Important information on types | https://github.com/getsops/sops#important-information-on-types |
| 3.1 YAML, JSON, ENV and INI type extensions | https://github.com/getsops/sops#yaml-json-env-and-ini-type-extensions |
| 3.2 JSON and JSON_binary indentation | https://github.com/getsops/sops#json-and-json-binary-indentation |
| 3.3 YAML indentation | https://github.com/getsops/sops#yaml-indentation |
| 3.4 YAML anchors | https://github.com/getsops/sops#yaml-anchors |
| 3.5 YAML Streams | https://github.com/getsops/sops#yaml-streams |
| 3.6 Top-level arrays | https://github.com/getsops/sops#top-level-arrays |
| 4 Examples | https://github.com/getsops/sops#examples |
| 4.1 Creating a new file | https://github.com/getsops/sops#creating-a-new-file |
| 4.2 Encrypting an existing file | https://github.com/getsops/sops#encrypting-an-existing-file |
| 4.3 Encrypt or decrypt a file in place | https://github.com/getsops/sops#encrypt-or-decrypt-a-file-in-place |
| 4.4 Encrypting binary files | https://github.com/getsops/sops#encrypting-binary-files |
| 4.5 Extract a sub-part of a document tree | https://github.com/getsops/sops#extract-a-sub-part-of-a-document-tree |
| 4.6 Set a sub-part in a document tree | https://github.com/getsops/sops#set-a-sub-part-in-a-document-tree |
| 4.7 Unset a sub-part in a document tree | https://github.com/getsops/sops#unset-a-sub-part-in-a-document-tree |
| 4.8 Showing diffs in cleartext in git | https://github.com/getsops/sops#showing-diffs-in-cleartext-in-git |
| 4.9 Encrypting only parts of a file | https://github.com/getsops/sops#encrypting-only-parts-of-a-file |
| 5 Config file format | https://github.com/getsops/sops#config-file-format |
| 5.1 Creation rule object | https://github.com/getsops/sops#creation-rule-object |
| 5.1.1 Matching | https://github.com/getsops/sops#matching |
| 5.1.2 Identities | https://github.com/getsops/sops#identities |
| 5.1.2.1 Key group object | https://github.com/getsops/sops#key-group-object |
| 5.1.3 Settings | https://github.com/getsops/sops#settings |
| 5.2 Destination rule object | https://github.com/getsops/sops#destination-rule-object |
| 5.3 Stores configuration object | https://github.com/getsops/sops#stores-configuration-object |
| 6 Encryption Protocol | https://github.com/getsops/sops#encryption-protocol |
| 6.1 Message Authentication Code | https://github.com/getsops/sops#message-authentication-code |
| 7 Motivation | https://github.com/getsops/sops#motivation |
| 7.1 The initial trust | https://github.com/getsops/sops#the-initial-trust |
| 7.2 KMS, Trust and secrets distribution | https://github.com/getsops/sops#kms-trust-and-secrets-distribution |
| 7.3 Operational requirements | https://github.com/getsops/sops#operational-requirements |
| 7.4 OpenPGP integration | https://github.com/getsops/sops#openpgp-integration |
| 8 Threat Model | https://github.com/getsops/sops#threat-model |
| 8.1 Compromised AWS credentials grant access to KMS master key | https://github.com/getsops/sops#compromised-aws-credentials-grant-access-to-kms-master-key |
| 8.2 Compromised PGP key | https://github.com/getsops/sops#compromised-pgp-key |
| 8.3 Factorized RSA key | https://github.com/getsops/sops#factorized-rsa-key |
| 8.4 Weak AES cryptography | https://github.com/getsops/sops#weak-aes-cryptography |
| 9 Backward compatibility | https://github.com/getsops/sops#backward-compatibility |
| 10 Security | https://github.com/getsops/sops#security |
| 11 License | https://github.com/getsops/sops#license |
| 12 Authors | https://github.com/getsops/sops#authors |
| 13 Credits | https://github.com/getsops/sops#credits |
| 2 Usage | https://github.com/getsops/sops#id5 |
| https://github.com/getsops/sops#2usage |
| https://www.youtube.com/watch?v=V2PRhxphH2w |
| aws-sdk-go-v2 | https://github.com/aws/aws-sdk-go-v2 |
| specifying credentials | https://aws.github.io/aws-sdk-go-v2/docs/configuring-sdk/#specifying-credentials |
| #127 | https://github.com/getsops/sops/issues/127 |
| 2.1 Test with the dev PGP key | https://github.com/getsops/sops#id6 |
| https://github.com/getsops/sops#21test-with-the-dev-pgp-key |
| 2.2 Encrypting with GnuPG subkeys | https://github.com/getsops/sops#id7 |
| https://github.com/getsops/sops#22encrypting-with-gnupg-subkeys |
| 2.3 Encrypting using age | https://github.com/getsops/sops#id8 |
| https://github.com/getsops/sops#23encrypting-using-age |
| age | https://age-encryption.org/ |
| 2.4 Encrypting using GCP KMS | https://github.com/getsops/sops#id9 |
| https://github.com/getsops/sops#24encrypting-using-gcp-kms |
| Application Default Credentials | https://developers.google.com/identity/protocols/application-default-credentials |
| 2.5 Encrypting using Azure Key Vault | https://github.com/getsops/sops#id10 |
| https://github.com/getsops/sops#25encrypting-using-azure-key-vault |
| default credential chain | https://pkg.go.dev/github.com/Azure/azure-sdk-for-go/sdk/azidentity#DefaultAzureCredential |
| Environment credentials | https://pkg.go.dev/github.com/Azure/azure-sdk-for-go/sdk/azidentity#EnvironmentCredential |
| Workload Identity credentials | https://pkg.go.dev/github.com/Azure/azure-sdk-for-go/sdk/azidentity#WorkloadIdentityCredential |
| Managed Identity credentials | https://pkg.go.dev/github.com/Azure/azure-sdk-for-go/sdk/azidentity#ManagedIdentityCredential |
| Azure CLI credentials | https://pkg.go.dev/github.com/Azure/azure-sdk-for-go/sdk/azidentity#AzureCLICredential |
| 2.6 Encrypting and decrypting from other programs | https://github.com/getsops/sops#id11 |
| https://github.com/getsops/sops#26encrypting-and-decrypting-from-other-programs |
| 2.7 Encrypting using Hashicorp Vault | https://github.com/getsops/sops#id12 |
| https://github.com/getsops/sops#27encrypting-using-hashicorp-vault |
| 2.8 Encrypting using HuaweiCloud KMS | https://github.com/getsops/sops#id13 |
| https://github.com/getsops/sops#28encrypting-using-huaweicloud-kms |
| default credential provider chain | https://github.com/huaweicloud/huaweicloud-sdk-go-v3/blob/master/core/auth/provider/provider.go |
| 2.9 Adding and removing keys | https://github.com/getsops/sops#id14 |
| https://github.com/getsops/sops#29adding-and-removing-keys |
| 2.9.1 updatekeys command | https://github.com/getsops/sops#id15 |
| https://github.com/getsops/sops#291updatekeys-command |
| .sops.yaml | https://github.com/getsops/sops#using-sops-yaml-conf-to-select-kms-pgp-for-new-files |
| Block Scalar yaml construct | https://yaml-multiline.info/ |
| 2.9.2 rotate command | https://github.com/getsops/sops#id16 |
| https://github.com/getsops/sops#292rotate-command |
| 2.9.3 Direct Editing | https://github.com/getsops/sops#id17 |
| https://github.com/getsops/sops#293direct-editing |
| 2.10 KMS AWS Profiles | https://github.com/getsops/sops#id18 |
| https://github.com/getsops/sops#210kms-aws-profiles |
| 2.11 Assuming roles and using KMS in various AWS accounts | https://github.com/getsops/sops#id19 |
| https://github.com/getsops/sops#211assuming-roles-and-using-kms-in-various-aws-accounts |
| IAM roles | http://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use.html |
| 2.12 AWS KMS Encryption Context | https://github.com/getsops/sops#id20 |
| https://github.com/getsops/sops#212aws-kms-encryption-context |
| AWS KMS key policy and encryption context | http://docs.aws.amazon.com/kms/latest/developerguide/encryption-context.html |
| 2.13 Key Rotation | https://github.com/getsops/sops#id21 |
| https://github.com/getsops/sops#213key-rotation |
| 2.14 Using .sops.yaml conf to select KMS, PGP and age for new files | https://github.com/getsops/sops#id22 |
| https://github.com/getsops/sops#214using-sopsyaml-conf-to-select-kms-pgp-and-age-for-new-files |
| Issue 242 | https://github.com/getsops/sops/issues/242 |
| 2.15 Specify a different GPG executable | https://github.com/getsops/sops#id23 |
| https://github.com/getsops/sops#215specify-a-different-gpg-executable |
| 2.16 Key groups | https://github.com/getsops/sops#id24 |
| https://github.com/getsops/sops#216key-groups |
| 2.17 Key service | https://github.com/getsops/sops#id25 |
| https://github.com/getsops/sops#217key-service |
| 2.18 Auditing | https://github.com/getsops/sops#id26 |
| https://github.com/getsops/sops#218auditing |
| PostgreSQL docs | https://www.postgresql.org/docs/current/static/libpq-connect.html#libpq-connstring |
| 2.19 Saving Output to a File | https://github.com/getsops/sops#id27 |
| https://github.com/getsops/sops#219saving-output-to-a-file |
| 2.20 Passing Secrets to Other Processes | https://github.com/getsops/sops#id28 |
| https://github.com/getsops/sops#220passing-secrets-to-other-processes |
| 2.21 Using the publish command | https://github.com/getsops/sops#id29 |
| https://github.com/getsops/sops#221using-the-publish-command |
| 2.21.1 Publishing to Vault | https://github.com/getsops/sops#id30 |
| https://github.com/getsops/sops#2211publishing-to-vault |
| environment
variables | https://www.vaultproject.io/docs/commands/#environment-variables |
| 3 Important information on types | https://github.com/getsops/sops#id31 |
| https://github.com/getsops/sops#3important-information-on-types |
| 3.1 YAML, JSON, ENV and INI type extensions | https://github.com/getsops/sops#id32 |
| https://github.com/getsops/sops#31yaml-json-env-and-ini-type-extensions |
| 3.2 JSON and JSON_binary indentation | https://github.com/getsops/sops#id33 |
| https://github.com/getsops/sops#32json-and-json_binary-indentation |
| 3.3 YAML indentation | https://github.com/getsops/sops#id34 |
| https://github.com/getsops/sops#33yaml-indentation |
| 3.4 YAML anchors | https://github.com/getsops/sops#id35 |
| https://github.com/getsops/sops#34yaml-anchors |
| 3.5 YAML Streams | https://github.com/getsops/sops#id36 |
| https://github.com/getsops/sops#35yaml-streams |
| 3.6 Top-level arrays | https://github.com/getsops/sops#id37 |
| https://github.com/getsops/sops#36top-level-arrays |
| 4 Examples | https://github.com/getsops/sops#id38 |
| https://github.com/getsops/sops#4examples |
| examples folder | https://github.com/getsops/sops/tree/main/examples |
| 4.1 Creating a new file | https://github.com/getsops/sops#id39 |
| https://github.com/getsops/sops#41creating-a-new-file |
| 4.2 Encrypting an existing file | https://github.com/getsops/sops#id40 |
| https://github.com/getsops/sops#42encrypting-an-existing-file |
| 4.3 Encrypt or decrypt a file in place | https://github.com/getsops/sops#id41 |
| https://github.com/getsops/sops#43encrypt-or-decrypt-a-file-in-place |
| 4.4 Encrypting binary files | https://github.com/getsops/sops#id42 |
| https://github.com/getsops/sops#44encrypting-binary-files |
| 4.5 Extract a sub-part of a document tree | https://github.com/getsops/sops#id43 |
| https://github.com/getsops/sops#45extract-a-sub-part-of-a-document-tree |
| 4.6 Set a sub-part in a document tree | https://github.com/getsops/sops#id44 |
| https://github.com/getsops/sops#46set-a-sub-part-in-a-document-tree |
| 4.7 Unset a sub-part in a document tree | https://github.com/getsops/sops#id45 |
| https://github.com/getsops/sops#47unset-a-sub-part-in-a-document-tree |
| 4.8 Showing diffs in cleartext in git | https://github.com/getsops/sops#id46 |
| https://github.com/getsops/sops#48showing-diffs-in-cleartext-in-git |
| 4.9 Encrypting only parts of a file | https://github.com/getsops/sops#id47 |
| https://github.com/getsops/sops#49encrypting-only-parts-of-a-file |
| 5 Config file format | https://github.com/getsops/sops#id48 |
| https://github.com/getsops/sops#5config-file-format |
| YAML format | https://yaml.org/ |
| 5.1 Creation rule object | https://github.com/getsops/sops#id49 |
| https://github.com/getsops/sops#51creation-rule-object |
| 5.1.1 Matching | https://github.com/getsops/sops#id50 |
| https://github.com/getsops/sops#511matching |
| 5.1.2 Identities | https://github.com/getsops/sops#id51 |
| https://github.com/getsops/sops#512identities |
| 5.1.2.1 Key group object | https://github.com/getsops/sops#id52 |
| https://github.com/getsops/sops#5121key-group-object |
| Shamir's secret sharing | https://en.wikipedia.org/wiki/Shamir%27s_secret_sharing |
| 5.1.3 Settings | https://github.com/getsops/sops#id53 |
| https://github.com/getsops/sops#513settings |
| 5.2 Destination rule object | https://github.com/getsops/sops#id54 |
| https://github.com/getsops/sops#52destination-rule-object |
| 5.3 Stores configuration object | https://github.com/getsops/sops#id55 |
| https://github.com/getsops/sops#53stores-configuration-object |
| 6 Encryption Protocol | https://github.com/getsops/sops#id56 |
| https://github.com/getsops/sops#6encryption-protocol |
| 6.1 Message Authentication Code | https://github.com/getsops/sops#id57 |
| https://github.com/getsops/sops#61message-authentication-code |
| 7 Motivation | https://github.com/getsops/sops#id58 |
| https://github.com/getsops/sops#7motivation |
| 7.1 The initial trust | https://github.com/getsops/sops#id59 |
| https://github.com/getsops/sops#71the-initial-trust |
| 7.2 KMS, Trust and secrets distribution | https://github.com/getsops/sops#id60 |
| https://github.com/getsops/sops#72kms-trust-and-secrets-distribution |
| 7.3 Operational requirements | https://github.com/getsops/sops#id61 |
| https://github.com/getsops/sops#73operational-requirements |
| 7.4 OpenPGP integration | https://github.com/getsops/sops#id62 |
| https://github.com/getsops/sops#74openpgp-integration |
| 8 Threat Model | https://github.com/getsops/sops#id63 |
| https://github.com/getsops/sops#8threat-model |
| 8.1 Compromised AWS credentials grant access to KMS master key | https://github.com/getsops/sops#id64 |
| https://github.com/getsops/sops#81compromised-aws-credentials-grant-access-to-kms-master-key |
| 8.2 Compromised PGP key | https://github.com/getsops/sops#id65 |
| https://github.com/getsops/sops#82compromised-pgp-key |
| 8.3 Factorized RSA key | https://github.com/getsops/sops#id66 |
| https://github.com/getsops/sops#83factorized-rsa-key |
| 8.4 Weak AES cryptography | https://github.com/getsops/sops#id67 |
| https://github.com/getsops/sops#84weak-aes-cryptography |
| 9 Backward compatibility | https://github.com/getsops/sops#id68 |
| https://github.com/getsops/sops#9backward-compatibility |
| 10 Security | https://github.com/getsops/sops#id69 |
| https://github.com/getsops/sops#10security |
| GitHub's advisory form | https://github.com/getsops/sops/security/advisories |
| 11 License | https://github.com/getsops/sops#id70 |
| https://github.com/getsops/sops#11license |
| 12 Authors | https://github.com/getsops/sops#id71 |
| https://github.com/getsops/sops#12authors |
| new group of maintainers | https://github.com/getsops/community/blob/main/MAINTAINERS.md |
| contributors | https://github.com/getsops/sops/graphs/contributors |
| 13 Credits | https://github.com/getsops/sops#id72 |
| https://github.com/getsops/sops#13credits |
| hiera-eyaml | https://github.com/TomPoulton/hiera-eyaml |
| credstash | https://github.com/LuminalOSS/credstash |
| sneaker | https://github.com/codahale/sneaker |
| password store | http://www.passwordstore.org/ |
| https://github.com/getsops/sops/blob/main/docs/images/cncf-color-bg.svg |
| Cloud Native Computing Foundation | https://cncf.io |
| getsops.io/ | https://getsops.io/ |
|
aws
| https://github.com/topics/aws |
|
security
| https://github.com/topics/security |
|
devops
| https://github.com/topics/devops |
|
azure
| https://github.com/topics/azure |
|
pgp
| https://github.com/topics/pgp |
|
gcp
| https://github.com/topics/gcp |
|
secret-management
| https://github.com/topics/secret-management |
|
secret-distribution
| https://github.com/topics/secret-distribution |
|
sops
| https://github.com/topics/sops |
|
Readme
| https://github.com/getsops/sops#readme-ov-file |
|
MPL-2.0 license
| https://github.com/getsops/sops#MPL-2.0-1-ov-file |
|
Code of conduct
| https://github.com/getsops/sops#coc-ov-file |
|
Contributing
| https://github.com/getsops/sops#contributing-ov-file |
| Please reload this page | https://github.com/getsops/sops |
|
Activity | https://github.com/getsops/sops/activity |
|
Custom properties | https://github.com/getsops/sops/custom-properties |
|
20.4k
stars | https://github.com/getsops/sops/stargazers |
|
117
watching | https://github.com/getsops/sops/watchers |
|
1k
forks | https://github.com/getsops/sops/forks |
|
Report repository
| https://github.com/contact/report-content?content_url=https%3A%2F%2Fgithub.com%2Fgetsops%2Fsops&report=getsops+%28user%29 |
| Releases
32 | https://github.com/getsops/sops/releases |
|
v3.11.0
Latest
Sep 28, 2025
| https://github.com/getsops/sops/releases/tag/v3.11.0 |
| + 31 releases | https://github.com/getsops/sops/releases |
| Packages
0 | https://github.com/orgs/getsops/packages?repo_name=sops |
| Please reload this page | https://github.com/getsops/sops |
| Used by 403 | https://github.com/getsops/sops/network/dependents |
|
+ 395
| https://github.com/getsops/sops/network/dependents |
| Contributors
182 | https://github.com/getsops/sops/graphs/contributors |
| Please reload this page | https://github.com/getsops/sops |
| + 168 contributors | https://github.com/getsops/sops/graphs/contributors |
|
Go
91.6%
| https://github.com/getsops/sops/search?l=go |
|
Rust
7.7%
| https://github.com/getsops/sops/search?l=rust |
|
| https://github.com |
| Terms | https://docs.github.com/site-policy/github-terms/github-terms-of-service |
| Privacy | https://docs.github.com/site-policy/privacy-policies/github-privacy-statement |
| Security | https://github.com/security |
| Status | https://www.githubstatus.com/ |
| Community | https://github.community/ |
| Docs | https://docs.github.com/ |
| Contact | https://support.github.com?tags=dotcom-footer |