# getsops/sops

Simple and flexible tool for managing secrets

Repository: https://github.com/getsops/sops
Canonical: https://ross.abutalabs.com/products/sops
Homepage: https://getsops.io
Language: Go
License: MPL-2.0
License Family: copyleft
Topics: security, secret-distribution, devops, aws, pgp, gcp, secret-management, azure, sops
Last push: 2026-08-26T19:19:37+00:00

## Health v2 (maintenance only)
Score: 97/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 99, release rhythm 94, longevity 100
- inputs: {"age_days": 4038, "days_push": 7, "days_rel": 41, "gap_med": 28, "n_releases_24m": 14}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 22932, forks 1077 (observed 2026-08-28T04:11:34.227133+00:00)

## What it is
SOPS is a CLI tool for encrypting and decrypting configuration files (YAML, JSON, ENV, INI, and binary) while keeping keys and structure visible. It supports cloud KMS providers (AWS, GCP, Azure, HuaweiCloud), HashiCorp Vault, OpenBAO, age, and PGP for key management.

## Use cases
- encrypt secrets in yaml config files
- commit encrypted credentials to git safely
- manage secrets with aws kms or age
- decrypt config files in ci/cd pipelines
- share encrypted secrets with a team using pgp or age keys
- encrypt dotenv files for deployment
- store secrets in gitops repositories

## When to choose
- you need secrets stored in version control with structure visible
- you want flexible key management across cloud KMS and offline tools like age
- you use gitops or kubernetes workflows needing encrypted files in repos

## When to avoid
- you need a full secrets manager with dynamic secrets and leasing (use Vault)
- you want a centralized secrets store rather than encrypted files
- you need per-secret access control rather than per-file

## Facets
- artifact type: cli-tool
- maturity: stable
- function: security, secrets-management, cryptography, configuration-management
- domain: security, cloud-computing, self-hosted, developer-tools
- platform: windows, cross-platform, cli, go
- tags: secrets-encryption, kms, age, pgp, encrypted-files, yaml, env, ini, cncf, devops, linux, macos

## Member repositories
- getsops/sops (main) score 97

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:11:34.227133+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T16:56:50.313729+00:00, confidence not recorded.
  - readme: https://github.com/getsops/sops (fetched 2026-08-28T04:11:34.227133+00:00, sha 63cb0a462ce2)
  - homepage: https://getsops.io (fetched 2026-08-29T07:54:51.911976+00:00, sha 6fb3b57cd908)
  - site_page: https://getsops.io/docs (fetched 2026-08-29T07:54:51.921074+00:00, sha de987b416628)
  - site_page: https://getsops.io/docs/installation (fetched 2026-08-29T07:54:51.922925+00:00, sha 980e80601faf)
- Data as of 2026-08-30T08:39:29.467469+00:00.