sops
SOPS (Secrets OPerationS): a simple and flexible tool for managing secrets. tldr-pages
On several platforms
Several platforms
Encrypt a file
sops -e path/to/file.json >path/to/file.enc.jsonIdentifyDecrypt a file to stdout
sops -d path/to/file.enc.jsonIdentifyUpdate the declared keys in a sops file
sops updatekeys path/to/file.enc.yamlIdentifyRotate data keys for a sops file
sops -r path/to/file.enc.yamlIdentifyChange the extension of the file once encrypted
sops -d --input-type json path/to/file.enc.jsonIdentifyExtract keys by naming them, and array elements by numbering them
sops -d --extract '["an_array"][1]' path/to/file.enc.jsonIdentifyShow the difference between two sops files
diff <(sops -d path/to/secret1.enc.yaml) <(sops -d path/to/secret2.enc.yaml)Identify