Repolode
Submit
getsops

getsops/sops

An editor for encrypted files that encrypts YAML, JSON, ENV, INI and binary files with cloud KMS, age or PGP keys.

Open-source alternative to:HashiCorp Vault

View on GitHubWebsite
Stars
23,485
Forks
1,105
Open issues
462
Last commit
3 days ago

What is it?

SOPS (Secrets OPerationS) is a command-line editor for encrypted files. It lets you open a file, edit its values in a normal editor, and save it back encrypted, so secrets such as passwords, API keys and certificates can live in version control without being stored in plain text.

SOPS works with YAML, JSON, ENV, INI and binary files. Encryption keys can come from AWS KMS, GCP KMS, Azure Key Vault, HuaweiCloud KMS, age, or PGP, so teams can use the key management system they already run.

The project is a CNCF Sandbox project, originally launched at Mozilla in 2015 and now maintained by a community group.

Key features

  • 01Edits YAML, JSON, ENV, INI and binary files in encrypted form.
  • 02Supports AWS KMS, GCP KMS, Azure Key Vault, HuaweiCloud KMS, age and PGP keys.
  • 03Keeps file structure readable so diffs in version control stay meaningful.
  • 04Decrypts files for use in scripts and deployment pipelines.

Use cases

  • Storing Kubernetes or Helm secrets in a Git repository.
  • Sharing configuration files with encrypted credentials across a team.
  • Managing environment files for applications deployed through CI/CD.

In collections

CLI & terminal toolsPrivacy & local-first toolsSecurity scanners, audits & threat intel tools

Topics

#secret-management#encryption#devops#kms#age#pgp#security#cli#aws#azure

FAQ

What is sops?
An editor for encrypted files that encrypts YAML, JSON, ENV, INI and binary files with cloud KMS, age or PGP keys. SOPS (Secrets OPerationS) is a command-line editor for encrypted files. It lets you open a file, edit its values in a normal editor, and save it back encrypted, so secrets such as passwords, API keys and certificates can live in version control without being stored in plain text.
Is sops free to use? What license does it have?
sops is open source under the MPL-2.0 license. Check the license terms before using it in commercial products.
Is sops still maintained?
Actively maintained. The last commit to sops was on Oct 20, 2026.
What can I use sops for?
Storing Kubernetes or Helm secrets in a Git repository. Sharing configuration files with encrypted credentials across a team. Managing environment files for applications deployed through CI/CD.
Where can I get sops?
The source code and installation instructions are on GitHub: https://github.com/getsops/sops

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects