getsops/sops on Hacker News

…and look for "Encrypt a message to your own key". Also, sops ( https://github.com/mozilla/sops ) works with gpg and so with Yubikeys.

comment by cuu508 · 2022-01-26 · in Guide to Using YubiKey for GPG and SSH

…(smudge). I use it on a ton of projects. [0]: https://www.agwa.name/projects/git-crypt/ [1]: https://github.com/mozilla/sops

comment by hardwaresofton · 2021-11-13 · in Sign arbitrary data with your SSH keys

…time and hadn't heard about `keyctl`, thanks for mentioning it. A more flexible solution might be https://github.com/mozilla/sops

comment by imiric · 2021-06-13 · in How to handle secrets on the command line

If you are going to put creds in git, at least use sops. https://github.com/mozilla/sops

comment by rpedela · 2021-01-19 · in Intentionally Leaking AWS Keys

Anyone saving encrypted secrets in git will probably find it helpful to enable cleartext diffs: https://github.com/mozilla/sops#48showing-diffs-in-cleartext... If you have many secrets you'll probably still end up breaking them out into…

comment by thinkmassive · 2020-12-08 · in Simple and flexible tool for managing secrets

…mentioned in the opening statement of the readme, and usage is detailed in section 2 of the docs: https://github.com/mozilla/sops#usage

comment by thinkmassive · 2020-12-08 · in Simple and flexible tool for managing secrets

…doing anything with KMS (and are doing a lot of role assumption, etc), set AWS_SDK_LOAD_CONFIG=1 https://github.com/mozilla/sops/issues/471#issuecomment-5036... (and i'm sure countless other references) Generally found that setting that…

comment by avh02 · 2020-12-08 · in Simple and flexible tool for managing secrets

The develop branch has merged support for age, too! https://github.com/mozilla/sops/tree/develop

comment by FiloSottile · 2020-12-08 · in Simple and flexible tool for managing secrets

…secrets - plaintext keys and encrypted values using remote KMS to do the encryption. https://github.com/mozilla/sops

comment by lukerohde · 2020-11-11 · in Show HN: Config.ly – Never hardcode your data again

…myapp.db.username=${decrypted_value_from_sops}`) and not bundle any secrets at build time at all. [1] https://github.com/mozilla/sops

comment by drablyechoes · 2020-10-14 · in Dockerfile Security Best Practices

…such a cool way to get the benefits of GitOps without sacrificing security. Edited to add link to https://github.com/mozilla/sops and to also mention my surprise at that Mozilla is behind SOPS. :)

comment by llarsson · 2020-08-24 · in Learn the main takeaways from KubeCon and CloudNativeCon EU 2020

I use and recommend Mozilla SOPS https://github.com/mozilla/sops

comment by worldhistory · 2020-07-13 · in Don't use ENV variables for secret data (2017)

…those are solutions to different problems. You can use all three. For example you can use sops ( https://github.com/mozilla/sops ) to store encrypted secrets in Git, using AWS/GCP KMS to encrypt/decrypt them (or encrypt/decrypt the…

comment by antoncohen · 2020-06-12 · in Best practices for managing and storing secrets like API keys and credentials

https://github.com/mozilla/sops is quite good to store encrypted secrets. Because the decryption key is stored in a KMS the secret access can be revoked any time.

comment by zimbatm · 2020-06-12 · in Best practices for managing and storing secrets like API keys and credentials

When managing/deploying code we use SOPS (Secrets OPerationS) https://github.com/mozilla/sops For standard password style secrets used by Ops, we use Team Password Manager. Which we chose about 5 years ago because it was self-hosted, the…

comment by bloopernova · 2020-06-02 · in Ask HN: How does your company manage its encryption keys?

…SOPS [1] instead of say, hashicorp vault or AWS/GCP's integrated keystores or git-crypt, etc? [1] https://github.com/mozilla/sops

comment by xref · 2020-03-15 · in Ask HN: Which configuration management software would/should you use in 2020?

…you host in the cloud that offers a KMS (AWS, GCP, Azure), a slightly advanced alternative is SOPS: https://github.com/mozilla/sops (you can use that with GnuPG as well)

comment by drdaeman · 2019-01-06 · in Build your own Mint

…I'm at a tiny org, though. For smaller orgs and projects, Mozilla Sops is really great: https://github.com/mozilla/sops It encrypts your secrets at rest using Google KMS, Amazon KMS, and various other cloud provider key services. You can…

comment by _zskd · 2018-12-04 · in Hashicorp Vault v1.0

Not sure I understand your use case but does this help? https://github.com/mozilla/sops

comment by paktek123 · 2018-11-17 · in Ask HN: How do you handle secret management?

For my k8s secrets I've been using sops: https://github.com/mozilla/sops It supports GCP/AWS KMS, so as long as my GCP user account can read the keychain, I can decrypt the secret. Very simple and does the job.

comment by tapoxi · 2018-08-20 · in My journey to securing sensitive data in Puppet code

Have you considered using Hashicorp Vault [1] or sops [2]? [1] https://www.vaultproject.io/ [2] https://github.com/mozilla/sops/

comment by 0xmohit · 2018-01-18 · in Serverless Architectures Security Guide

…place - Encrypting binary files In-place encryption/decryption is a pretty useful feature, IMO. [0] https://github.com/mozilla/sops#id22

comment by 0xmohit · 2018-01-14 · in Sops – An editor of encrypted files using AWS KMS and PGP

If you're comfortable with using KMS already, I recommend checking out SOPS: https://github.com/mozilla/sops It can be versioned if you use git, access controlled via the KMS access privileges, and easily plugs into other tools because it…

comment by haimez · 2017-11-27 · in Strongbox: a secret manager for AWS

…ago). BTW Mozilla's sops [1] is quite interesting. I've been testing this for a while now. [1]: https://github.com/mozilla/sops

comment by yeukhon · 2017-09-20 · in HashiCorp and Google: easing secret and infrastructure management

I wrote https://github.com/mozilla/sops to manage secrets in our deployments, and also use it as my personal password store, to encrypt a file stored in a private git repo.

comment by jvehent · 2017-07-15 · in Ask HN: What is your password management solution?

It does - https://github.com/mozilla/sops/blob/master/sops/__init__.py...

comment by thatrascaltiger · 2016-07-18 · in Biscuit: a multi-region key value store for your AWS infrastructure secrets

It looks like this is fairly similar to Mozilla sops[1]. [1] https://github.com/mozilla/sops

comment by thatrascaltiger · 2016-07-18 · in Biscuit: a multi-region key value store for your AWS infrastructure secrets

…manually authorize new nodes to retrieve secrets (that's how puppet approves new agent certs). [1] https://github.com/mozilla/sops

comment by jvehent · 2016-01-18 · in Ask HN: In a microservice architecture, how do you handle managing secrets?

…at Mozilla, with sops[1] to securely store backup keys of some of our secrets files. [1] https://github.com/mozilla/sops

comment by jvehent · 2015-12-27 · in Yubico with new 4096-bit keys and gpg-agent for ssh authentication

An alternative approach, if you don't want to be 100% tied to KMS, is https://github.com/mozilla/sops . It uses KMS, but also PGP, and potentially anything that comes up in the future.

comment by jvehent · 2015-11-04 · in Confidant: an open-source secret management service