getsops/sops

Health v2 · maintenance only

Adoption not part of the score

22932 stars · 1077 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

SOPS is a CLI tool for encrypting and decrypting configuration files (YAML, JSON, ENV, INI, and binary) while keeping keys and structure visible. It supports cloud KMS providers (AWS, GCP, Azure, HuaweiCloud), HashiCorp Vault, OpenBAO, age, and PGP for key management.

Use cases

• encrypt secrets in yaml config files
• commit encrypted credentials to git safely
• manage secrets with aws kms or age
• decrypt config files in ci/cd pipelines
• share encrypted secrets with a team using pgp or age keys
• encrypt dotenv files for deployment
• store secrets in gitops repositories

When to choose

• you need secrets stored in version control with structure visible
• you want flexible key management across cloud KMS and offline tools like age
• you use gitops or kubernetes workflows needing encrypted files in repos

When to avoid

• you need a full secrets manager with dynamic secrets and leasing (use Vault)
• you want a centralized secrets store rather than encrypted files
• you need per-secret access control rather than per-file

Facets

cli-tool · maturity stable

security secrets-management cryptography configuration-management security cloud-computing self-hosted developer-tools windows cross-platform cli go secrets-encryption kms age pgp encrypted-files yaml env ini cncf devops linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="getsops/sops")