Skip to content

Latest commit

 

History

History
34 lines (22 loc) · 968 Bytes

README.md

File metadata and controls

34 lines (22 loc) · 968 Bytes
Raw

EZSops

EZSops is a tool for encrypting and decrypting files using sops with KMS keys. It helps avoid many of the pitfalls of using sops directly, and introduces much needed quality of life features:

  • Keeps a record of KMS keys used in the past for easy re-use
  • Detects if the file was not correctly encrypted
  • Automatically sets the output file name

Prerequisites

EZSops requires the following tools to be installed:

Installation

To install EZSops, you can use bpkg, a bash package manager. If you don't have bpkg installed, you can find instructions at https://bpkg.sh/.

Once bpkg is installed, run the following command:

bpkg install cerebruminc/ezsops

Usage

EZSops provides two commands: encrypt and decrypt. Both commands take a single argument, the file to encrypt or decrypt.

ezsops encrypt secret.yml
ezsops decrypt sops.secret.yml