getsops/sops on Hacker News

…leave a plain-text trace for everyone to read (the environment is not private). I like sops: https://github.com/getsops/sops

comment by nebezb · 2026-08-28 · in The Twelve-Factor App (2025)

…Secrets management unfortunately isn't as easy as config management. I personally like sops[1]. [1] https://github.com/getsops/sops

comment by nebezb · 2026-08-28 · in The Twelve-Factor App (2025)

I’ve been using sops: https://github.com/getsops/sops

comment by dgellow · 2026-05-21 · in Get your passwords out of Bitwarden while you still can

…gigantic corporation that's going to do anything it can to survive in the coming years. [1] https://github.com/getsops/sops

comment by epistasis · 2026-05-19 · in Sieve – scans Cursor/Claude chat history for leaked API keys

I thought SOPS with age is what we were doing now. Do we need yet another tooling? https://github.com/getsops/sops

comment by moontear · 2026-03-12 · in Scrt: A CLI secret manager for developers, sysadmins and DevOps

…secrets in as plain text args on the command line is worse, so at least you're not doing that! 1: https://github.com/getsops/sops / https://github.com/FiloSottile/age 2: https://dotenvx.com

comment by ctmnt · 2026-02-24 · in Show HN: enveil – hide your .env secrets from prAIng eyes

https://github.com/getsops/sops This software has done this for years

comment by Zizizizz · 2026-02-24 · in Show HN: enveil – hide your .env secrets from prAIng eyes

…Also, if this same editor has AI features in it, it may read the decrypted vars anyways. - [1]: https://github.com/getsops/sops

comment by TheRoque · 2026-01-19 · in Using proxies to hide secrets from Claude Code

…cover. You can use Age as a backend and then you only need a long lived private key on the server. https://github.com/getsops/sops

comment by CGamesPlay · 2025-12-13 · in Home Depot GitHub token exposed for a year, granted access to internal systems

…on disk, the pipe is cleared after first read, and /proc/cmdline doesn’t reveal anything. 0: https://github.com/getsops/sops

comment by sgarland · 2025-10-13 · in Environment variables are a legacy mess: Let's dive deep into them

SOPS can be part of the solution. It takes care of encrypting and decrypting config files. https://github.com/getsops/sops

comment by matthew16550 · 2025-10-13 · in Environment variables are a legacy mess: Let's dive deep into them

▲ 2

SOPS is an editor of encrypted files

story by kblissett · 2025-08-27 · 0 comments

…of. From one of the issues, it currently lacks support for the POSIX-semantic way to run commands: https://github.com/getsops/sops/issues/1469 , where you cannot add a `--` to tell sops that everything after it is supposed to be a command,…

comment by pacmansyyu · 2025-07-17 · in Show HN: kiln – Git-native, decentralized secret management using age

…security margin is at the mercy of GPG’s opaque and historically not very good defaults.) [1]: https://github.com/getsops/sops

comment by woodruffw · 2025-04-17 · in Shell-secrets – GPG-encrypted environment variables

…answer for the use-case in question, anywho. What they’re looking for would actually be sops ( https://github.com/getsops/sops ), or age (made by the fantastic Filo Sottile: https://github.com/FiloSottile/age ), or, hell, just using…

comment by hatf0 · 2025-02-01 · in Hell is overconfident developers writing encryption code

…[0] https://github.com/AGWA/git-crypt/issues/273 [1] https://www.passwordstore.org/ [2] https://github.com/getsops/sops [3] https://www.vaultproject.io/ [4] https://infisical.com/

comment by visualphoenix · 2024-11-27 · in Git-crypt – transparent file encryption in Git

…I've heard sops is also used for this kind of usecase, although it seems to do much more. [1] https://github.com/getsops/sops

comment by zaptheimpaler · 2024-11-27 · in Git-crypt – transparent file encryption in Git

You can also do some nice things with https://github.com/getsops/sops , I store encrypted password and secrets on git with sops, but I also use nix so I have near perfect integration with my services.

comment by mbrumlow · 2024-10-07 · in Do not use secrets in environment variables

Encrypting dotenv files is a thing, I would even say it has become popular! https://dotenvx.com https://github.com/getsops/sops

comment by vinnymac · 2024-10-07 · in Do not use secrets in environment variables

…is a valid way that some folks use (see https://dotenvx.com/ , https://github.com/AGWA/git-crypt , https://github.com/getsops/sops ) which can make sense for simpler projects with less stringent security needs. The bonus here is it does…

comment by theozero · 2024-10-06 · in DMNO: Environment Variables Evolved

…ps://hsm.tunnel53.net/article/secrets-management/ If you want something simpler, have a look at SOPS: https://github.com/getsops/sops

comment by cpach · 2024-09-26 · in Ask HN: What tools should I use to manage secrets from env files?

…is an interesting alternative to password manager, esp. if you want to version control your secrets https://github.com/getsops/sops

comment by mrl5 · 2024-09-24 · in Ask HN: What tools should I use to manage secrets from env files?

These? [0] https://github.com/AGWA/git-crypt [1] https://github.com/getsops/sops

comment by mkl · 2024-08-05 · in Age is a simple, modern and secure file encryption tool, format, and Go library

…at the editor level (age.el) sounds really nice though. [0] https://github.com/AGWA/git-crypt [1] https://github.com/getsops/sops

comment by hardwaresofton · 2024-08-05 · in Age is a simple, modern and secure file encryption tool, format, and Go library

…implementation [1] and sops supports it natively [2]. [1] https://github.com/FiloSottile/typage [2] https://github.com/getsops/sops?tab=readme-ov-file#encryptin...

comment by lf-non · 2024-08-05 · in Age is a simple, modern and secure file encryption tool, format, and Go library

There's also sops: https://github.com/getsops/sops I've used it at two jobs now over about 5 years and have had zero issues.

comment by mplanchard · 2024-06-25 · in Show HN: From dotenv to dotenvx – better config management

https://github.com/getsops/sops

comment by bogdan · 2024-06-25 · in Show HN: From dotenv to dotenvx – better config management

…comment, but I've been using it over five years at two jobs and have found it to be great. [0]: https://github.com/getsops/sops

comment by mplanchard · 2024-06-25 · in Show HN: From dotenv to dotenvx – better config management

…could even use separate keys per env, eg.: to give access to a developer to staging only. Mozilla's https://github.com/getsops/sops is another contender but with a more complicated (and perhaps more flexible) key management.

comment by daralthus · 2024-06-25 · in Show HN: From dotenv to dotenvx – better config management

…able to install it with pip(x) would be really nice. [0] https://github.com/belthesar/sops-run [1] https://github.com/getsops/sops

comment by belthesar · 2024-04-29 · in Show HN: Dotenv, if it is a Unix utility

My script just sets up default .sops.yaml for https://github.com/getsops/sops You can further edit .sops.yaml(eg have multiple of them) and decide how you split secrets in your directory tree to further customize who can decrypt the…

comment by tarasglek · 2024-04-22 · in Pico.sh – Hacker Labs

…between the encrypted secrets Definitely not best practice security-wise, but it works well [1] https://github.com/getsops/sops

comment by sneakerblack · 2023-11-02 · in Tracking SQLite Database Changes in Git

For anyone new to SOPS like I was - https://github.com/getsops/sops

comment by edwinbalani · 2023-10-12 · in The Twelve-Factor App (2011)

…to build from when teams outgrow the PaaS sandbox. [1] https://github.com/Shopify/ejson [2] https://github.com/getsops/sops

comment by campbel · 2023-10-12 · in The Twelve-Factor App (2011)

…it to work well. If you don't want to use a cloud secret manager you can also use something like https://github.com/getsops/sops to commit the encrypted secrets safely

comment by mnahkies · 2023-09-17 · in Show HN: Shello – Wrangle environment variables

Thanks! Another useful tool that can be added into a solution: https://github.com/getsops/sops

comment by kosolam · 2023-09-08 · in Ask HN: Any Encrypted Notes Backup?

…in heaven. SOPS is a great tool and could be a pretty killer starting point for this stuff! -- 1: https://github.com/getsops/sops

comment by pxc · 2023-08-26 · in OpenTF announces fork of Terraform

…them in to version control. We use SOPS[0] for this, and have found it to be pretty nice. [0]: https://github.com/getsops/sops

comment by montroser · 2023-08-19 · in Check your secrets into Git [video]

…folks. Probably one of those solutions you reviewed before creating Banana Split! -- 1: https://github.com/getsops/sops

comment by pxc · 2023-08-02 · in Shamir Secret Sharing

Some folks use tools like https://github.com/mozilla/sops to store most secrets (besides the sops key, of course) in source control. Of course, you aren't committing the cleartext but if the repo gets published you should probably rotate…

comment by sobellian · 2023-06-04 · in GitHub Private Repos Considered Private-Ish

Looks like no[1] but there's an attempt to get it taken over by cncf to fix that[2]. 1: https://github.com/mozilla/sops/discussions/927 2: https://github.com/cncf/sandbox/issues/28

comment by Macha · 2023-03-12 · in Mozilla/Sops: Simple and flexible tool for managing secrets

▲ 116

Mozilla/Sops: Simple and flexible tool for managing secrets

story by nateb2022 · 2023-03-11 · 17 comments

…account). Groups can be created to limit certain credentials to subsets of users [1] https://github.com/mozilla/sops [2] https://www.runatlantis.io/docs/repo-level-atlantis-yaml.htm... [3] https://docs.github.com/en/actions/deployment/secur…

comment by pcjun97 · 2023-03-06 · in Ask HN: Secure and simple way for secret/credential management in a startup?

Sops is great. I hope they will find new maintainers. https://github.com/mozilla/sops/discussions/927

comment by speedgoose · 2023-02-26 · in Age: Modern file encryption format with multiple pluggable recipients

I ran into this recently when using https://github.com/mozilla/sops . It worked pretty nicely and as a tool was quite easy to get started with.

comment by lazypenguin · 2023-02-26 · in Age: Modern file encryption format with multiple pluggable recipients

…be a bit heavyweight. You can also use team versions of password managers for simpler tasks. [0] https://github.com/mozilla/sops

comment by robertlagrant · 2023-02-08 · in Keybase.pub Shutting Down on March 1 2023

…I never understand why people go all in on cloud based password stores or identify for that manner https://github.com/mozilla/sops

comment by andrewwebber · 2022-12-23 · in Seriously, What is the best way to save passwords?

…at code, code reviewed, and versioned, which has devops and security benefits of its own. [1]: https://github.com/mozilla/sops

comment by xvector · 2022-12-21 · in A not so unfortunate sharp edge in Pipenv

For encrypted secrets in git I'd suggest looking at sops and password store: https://github.com/mozilla/sops https://github.com/android-password-store/Android-Password-S... Both are extremely useful secrets oriented git tools with support…

comment by hkt · 2022-06-29 · in GitJournal: Mobile first Markdown notes synchronized with Git

…using keygroups, though. Probably in some of them, the repos are public and can tell you that. https://github.com/mozilla/sops

comment by pxc · 2022-06-22 · in How to Share a Secret [pdf] (1979)