Simple and flexible tool for managing secrets https://getsops.io
Find a file
Felix Fontein e8021ac3b4
Merge pull request #2286 from getsops/dependabot/github_actions/ci-27474254a5
build(deps): Bump the ci group with 3 updates
2026-08-24 21:04:38 +02:00
.github build(deps): Bump the ci group with 3 updates 2026-08-24 18:06:06 +02:00
.release build(deps): Bump alpine in /.release in the docker group 2026-06-15 17:30:19 +02:00
aes Encrypt and decrypt time.Time objects. 2025-02-16 14:24:28 +01:00
age Avoid percent-encoding of cache key to blow up size > 50 characters. 2026-05-15 09:42:57 +02:00
audit Switch from deprecated gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 2025-09-07 17:37:00 +02:00
azkv Apply 'gofmt -w -s' to all .go files. 2026-05-14 22:24:14 +02:00
cmd/sops Remove leading newline. 2026-07-21 06:43:03 +02:00
config Merge branch 'main' into feat/huaweicloud-kms 2025-12-16 23:41:37 +03:00
decrypt Allow no indent at all for json store 2023-11-24 07:41:14 +01:00
docs Shorten .md lines. 2026-06-26 18:36:09 +02:00
examples Add and use encrypt and decrypt subcommands. 2024-02-06 15:00:33 +01:00
functional-tests build(deps): Bump the rust group in /functional-tests with 3 updates 2026-07-20 19:32:43 +02:00
gcpkms fix(gcpkms): address review comments on sovereign cloud KMS support 2026-03-31 10:22:55 +02:00
hckms feat: Add HuaweiCloud KMS support 2025-12-12 09:41:42 +03:00
hcvault Also append '/' to address to test. 2026-05-03 12:22:31 +02:00
keys Sort masterkeys according to decryption-order 2023-12-18 08:38:43 +01:00
keyservice feat: Add HuaweiCloud KMS support 2025-12-12 09:41:42 +03:00
kms Adjust role split string to not hardcode 'aws' partition of AWS. 2026-02-16 07:02:39 +01:00
logging go lint 2019-07-11 10:30:32 -07:00
pgp test: Unset user GNUPGHOME env var for gnuPGHome 2026-02-04 09:19:48 -06:00
publish Run 'gofmt -w' on all .go files. 2025-03-28 20:11:33 +01:00
shamir Shorten .md lines. 2026-06-26 18:36:09 +02:00
stores Backwards compatibility fix for the INI store. 2026-06-20 23:07:02 +02:00
version Bump version to 3.13.3. 2026-07-23 06:42:42 +02:00
.git-blame-ignore-revs Add commit to .git-blame-ignore-revs. 2025-03-28 20:12:04 +01:00
.gitignore Add Cargo.lock for better reproducability of functional tests. 2024-09-26 22:20:11 +03:00
.goreleaser.yaml Update release for cosign v3 2026-04-18 12:34:07 -05:00
.sops.yaml Update the PGP Key for all Examples 2019-12-10 14:34:45 -08:00
CHANGELOG.md Fix old changelog. 2026-07-23 06:44:14 +02:00
CHANGELOG.rst Convert changelog to MarkDown. 2025-01-26 10:03:55 +01:00
CODE_OF_CONDUCT.md Shorten .md lines. 2026-06-26 18:36:09 +02:00
CONTRIBUTING.md Shorten .md lines. 2026-06-26 18:36:09 +02:00
DCO Add Developer Certificate of Origin 2023-07-01 00:53:18 +02:00
example.ini Update sops format version for example files 2019-12-10 14:47:45 -08:00
example.json Update sops format version for example files 2019-12-10 14:47:45 -08:00
example.txt Update sops format version for example files 2019-12-10 14:47:45 -08:00
example.yaml Fix example.yaml. 2025-08-06 20:57:28 +02:00
go.mod build(deps): Bump the go group with 12 updates 2026-08-24 09:19:35 +00:00
go.sum build(deps): Bump the go group with 12 updates 2026-08-24 09:19:35 +00:00
LICENSE Add Mozilla Public License Version 2.0 (#488) 2019-07-04 19:42:17 +02:00
mac_comment_test.go test: use real AES cipher in an external test package; refine MAC comment 2026-07-11 13:37:23 +02:00
Makefile test: unset all age env vars in make test target 2026-06-04 08:17:07 +09:00
README.rst Fix minimum Go version in contributor docs. 2026-05-15 14:53:29 +02:00
rust-toolchain.toml Bump Rust version to 1.85. 2025-03-03 18:17:00 +01:00
sops.go test: use real AES cipher in an external test package; refine MAC comment 2026-07-11 13:37:23 +02:00
sops_test.go test: use real AES cipher in an external test package; refine MAC comment 2026-07-11 13:37:23 +02:00
usererrors.go *: address various simple staticcheck warnings 2023-08-17 00:16:40 +02:00

SOPS: Secrets OPerationS
========================

**SOPS** is an editor of encrypted files that supports YAML, JSON, ENV, INI and BINARY
formats and encrypts with AWS KMS, GCP KMS, Azure Key Vault, HuaweiCloud KMS, age, and PGP.
(`demo <https://www.youtube.com/watch?v=YTEVyLXFiq0>`_)

.. image:: https://i.imgur.com/X0TM5NI.gif

------------

.. image:: https://pkg.go.dev/badge/github.com/getsops/sops/v3.svg
    :target: https://pkg.go.dev/github.com/getsops/sops/v3

Documentation
-------------

You can find the SOPS documentation on `getsops.io <https://getsops.io/>`_ under `"Docs" <https://getsops.io/docs/>`_.

Security
--------

Please report any security issues privately using `GitHub's advisory form <https://github.com/getsops/sops/security/advisories>`_.

License
-------

Mozilla Public License Version 2.0

Authors
-------

SOPS was initially launched as a project at Mozilla in 2015 and has been
graciously donated to the CNCF as a Sandbox project in 2023, now under the
stewardship of a `new group of maintainers <https://github.com/getsops/community/blob/main/MAINTAINERS.md>`_.

The original authors of the project were:

* Adrian Utrilla @autrilla
* Julien Vehent @jvehent

Furthermore, the project has been carried for a long time by AJ Bahnken @ajvb,
and had not been possible without the contributions of numerous `contributors <https://github.com/getsops/sops/graphs/contributors>`_.

Credits
-------

SOPS was inspired by `hiera-eyaml <https://github.com/TomPoulton/hiera-eyaml>`_,
`credstash <https://github.com/LuminalOSS/credstash>`_,
`sneaker <https://github.com/codahale/sneaker>`_,
`password store <http://www.passwordstore.org/>`_ and too many years managing
PGP encrypted files by hand...

-----

.. image:: docs/images/cncf-color-bg.svg
   :width: 400
   :alt: CNCF Sandbox Project

**We are a** `Cloud Native Computing Foundation <https://cncf.io>`_ **sandbox project.**