SOPS
devsecops secrets-management
Mozilla's encrypted file editor for secrets
Pros and Cons
Ventajas
- + Encrypts only values, not keys
- + Supports AWS KMS, GCP, Azure, PGP
- + Diff-friendly in Git
- + Integrates with Terraform, Helm
- + Auditable and versionable
Desventajas
- - Requires key management
- - Not a complete secrets manager
- - Initial configuration
- - Manual compared to alternatives
Casos de Uso
- Secrets in Git repos
- Encrypted config files
- Helm values with secrets
- IaC with secure secrets