encrypted_regex for particular nodes in yaml?
Open
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 23.1k
- Forks
- 1.1k
- Avg merge
- 1d 11h
- Merged PRs (30d)
- 9
Description
Hello,
For the given yaml, how can I write an encrypted_regex to only match "Default" under "B"?
A:
Type: string
Default: string
B:
Type: string
Default: string
If I use encrypted_regex: "Default", it encrypts "Default" under both "A" and "B".
Version info
$ sops -v
sops 3.8.1 (latest)
Thank you.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Reproduce the YAML example with SOPS 3.8.1 and review the documented encrypted_regex behavior for nested mappings. Confirm whether matching only B.Default is supported; document the supported syntax or clearly explain the limitation and expected behavior.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- yaml
- Domain
- security
- Issue type
- Documentation
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100