Any way to disable probing GitHub?

[grepwood]

I'm using sops in a network environment where I will never ever in a million years be able to contact github.com directly. I'd like to be able to call sops -v without it complaining that it can't check what's the latest version.

Is there any environment variable perhaps that controls this behavior?

[grepwood]

Alright I found myself aliasing sops to sops --disable-version-check.

[felixfontein]

Yes, if you don't want sops -v to contact GitHub, you need to pass --disable-version-check.

[grepwood]

What kind of REST API call is actually used to get this info? Perhaps I could emulate it from my side of the intranet

[felixfontein]

It tries two approaches (see https://github.com/getsops/sops/blob/main/version/version.go#L136):

• First it tries https://github.com/getsops/sops/releases/latest to see where this redirects to;
• Then it tries the GitHub REST API.

[c33s]

can we please have an environment variable for that? quite uncool that a security tool leaks my ip address without consent.