# jkroepke/helm-secrets

A helm plugin that help manage secrets with Git workflow and store them anywhere

Repository: https://github.com/jkroepke/helm-secrets
Canonical: https://ross.abutalabs.com/products/helm-secrets
Homepage: https://github.com/jkroepke/helm-secrets/wiki
Language: Shell
License: Apache-2.0
License Family: permissive
Topics: helm, helm-plugin, helm-plugins, kubernetes, k8s, helm-charts, helm-chart, sops, kubernetes-secrets, kms, encryption-tool, encryption, decryption, secret-management, secrets, secrets-management, secrets-stored, vault, gpg, argocd
Last push: 2026-08-21T19:25:08+00:00

## Health v2 (maintenance only)
Score: 95/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 98, release rhythm 87, longevity 100
- inputs: {"age_days": 2859, "days_push": 12, "days_rel": 86, "gap_med": 22.5, "n_releases_24m": 17}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2025, forks 154 (observed 2026-08-28T04:06:06.770195+00:00)

## What it is
helm-secrets is a Helm plugin that transparently encrypts and decrypts Helm value files using sops, allowing secrets to be safely stored in Git. It also supports injecting secrets from cloud secret managers like AWS Secrets Manager, Azure Key Vault, and HashiCorp Vault via vals expressions.

## Use cases
- encrypt helm values files for git
- manage kubernetes secrets in gitops workflow
- decrypt helm value files on the fly
- use sops with helm charts
- inject vault secrets into helm templates
- use helm secrets with argocd
- store encrypted secrets in git for kubernetes

## When to choose
- you store Helm value files containing secrets in Git and want them encrypted
- you use GitOps tools like ArgoCD and need secret decryption during deployment
- you want to pull secrets from AWS Secrets Manager, Azure Key Vault, or HashiCorp Vault into Helm values
- you want a mature, widely adopted Helm secrets solution

## When to avoid
- you use a different package manager than Helm
- you prefer external secret operators like External Secrets Operator or Sealed Secrets
- you don't need secrets in your Helm values at all

## Facets
- artifact type: plugin
- maturity: active
- function: secrets-management, cryptography, security, configuration-management, deployment
- domain: security, cloud-computing, infrastructure-as-code, self-hosted
- platform: cli, windows, cloud
- tags: helm-plugin, sops, helm-secrets, gitops, argocd, vault, kms, encryption, value-files, kubernetes-secrets, devops, containers, kubernetes, linux, macos, docker

## Member repositories
- jkroepke/helm-secrets (main) score 95

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:06:06.770195+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T02:59:46.052734+00:00, confidence not recorded.
  - readme: https://github.com/jkroepke/helm-secrets (fetched 2026-08-28T04:06:06.770195+00:00, sha 212dec3a5814)
  - homepage: https://github.com/jkroepke/helm-secrets/wiki (fetched 2026-08-29T10:39:49.403798+00:00, sha 46bc7eb01dde)
- Data as of 2026-08-30T08:39:29.467469+00:00.