flag to disable gpg key server fetch
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 23.1k
- Forks
- 1.1k
- Avg merge
- 1d 11h
- Merged PRs (30d)
- 9
Description
Hi,
all sops operation on my local system throw a warning like
[PGP] WARN[0000] Deprecation Warning: GPG key fetching from a keyserver within sops will be removed in a future version of sops. See https://github.com/mozilla/sops/issues/727 for more information.
I know the feature is deprecated, but my gpg key isn't store on a gpg keyserver. It's only available on my local system. I confirm that by running https://keys.openpgp.org/vks/v1/by-fingerprint/<GPG 40char FP>. It gives me No key found for this fingerprint. back. But decryption and encryption still works fine.
Based on that, I would like the disable the feature to suppress that message completely. I even don't know why the messages appears if the gpg key is on a local system.
I'm running sops 3.7.1 (latest) on a MacOS.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by tracing the PGP key-fetch warning reported by sops 3.7.1 and review the related issue 727 for context. Identify where command-line configuration controls key fetching, then verify that the requested option suppresses the warning without changing encryption or decryption behavior.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- cli, cryptography, security
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100