What is this?
SOPS (Secrets OPerationS) is an editor for encrypted files that supports YAML, JSON, ENV, INI and BINARY formats, encrypting values with AWS KMS, GCP KMS, Azure Key Vault, HuaweiCloud KMS, age, or PGP.
SOPS (Secrets OPerationS) is an editor for encrypted files that supports YAML, JSON, ENV, INI and BINARY formats, encrypting values with AWS KMS, GCP KMS, Azure Key Vault, HuaweiCloud KMS, age, or PGP.Is this a library or a standalone CLI tool?It's a standalone command-line tool you run directly on your secret files; it isn't a library you import into code.
It's a standalone command-line tool you run directly on your secret files; it isn't a library you import into code.How do I start encrypting files with it?Install the sops binary and run it against a YAML/JSON/ENV/INI/binary file, pointing it at a key from a supported provider (KMS, Azure Key Vault, age, or PGP) to encrypt or edit the file in place.
Install the sops binary and run it against a YAML/JSON/ENV/INI/binary file, pointing it at a key from a supported provider (KMS, Azure Key Vault, age, or PGP) to encrypt or edit the file in place.Do I need a cloud account or can I use it fully offline with age/PGP keys?No cloud account is required: besides AWS KMS, GCP KMS, Azure Key Vault and HuaweiCloud KMS, sops also supports age and PGP keys, which work entirely locally without any cloud provider.
No cloud account is required: besides AWS KMS, GCP KMS, Azure Key Vault and HuaweiCloud KMS, sops also supports age and PGP keys, which work entirely locally without any cloud provider.Does the project have a security disclosure process?Security issues should be reported privately via GitHub's advisory form rather than in public issues.
Security issues should be reported privately via GitHub's advisory form rather than in public issues.What inspired SOPS?The project was inspired by hiera-eyaml, credstash, sneaker, pass (password store) and years of manually managing PGP-encrypted files.
The project was inspired by hiera-eyaml, credstash, sneaker, pass (password store) and years of manually managing PGP-encrypted files.Where can I find the full documentation?The SOPS documentation is hosted on getsops.io under the Docs section.
The SOPS documentation is hosted on getsops.io under the Docs section.What are similar projects?kops, openbao, vault, pulumi, infisical, serverless, trufflehog, redStackPRO
kops, openbao, vault, pulumi, infisical, serverless, trufflehog, redStackPROWhich topics is it in?secret-management, gcp, devsecops, cncf, azure, configuration, cryptography, yaml, aws, json, encryption, devops
secret-management, gcp, devsecops, cncf, azure, configuration, cryptography, yaml, aws, json, encryption, devops