getsops/sops

View on GitHub

Simple and flexible tool for managing secrets

Stars: 23.1k
Forks: 1.1k
Open beginner issues: 1
Indexed issues: 376
Avg merge: 1d 11h
Merged PRs (30d): 9

Dominant language: Go
License: MPL-2.0
Last GitHub push: Sep 18, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: help wanted good first issue

Beginner friendly Everything

Open All

376 open issues indexed

Add --no-clobber for explicit output files Open

Difficulty 4/5 3-5 days Newbie friendliness 68/100

getsops/sops#2297 · Opened Sep 9, 2026
Add a dry-run validation command for encrypted files Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 48/100

getsops/sops#2288 · 1 comment · Opened Aug 29, 2026
Github Security Advisories - GHSA-ccvp-wg6g-j5pf Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

getsops/sops#2280 · 1 reaction · Opened Aug 17, 2026
Certificate Revocation List(CRL) support for HC Vault Open

enhancement keyservice/hcvault

Difficulty 4/5 3-5 days Newbie friendliness 48/100

getsops/sops#2277 · 4 comments · Opened Aug 12, 2026
New docs is great but difficult to find stuff on Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 45/100

getsops/sops#2276 · 1 comment · Opened Aug 11, 2026
Nebius KMS support Open

Difficulty 4/5 3-5 days Newbie friendliness 42/100

getsops/sops#2270 · Opened Aug 5, 2026
updatekeys doesn't trigger when key ordering change Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 55/100

getsops/sops#2269 · Opened Aug 4, 2026
Sopsy — a wrapper around SOPS, age, and age-plugin-se Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

getsops/sops#2265 · 4 comments · 1 reaction · Opened Jul 28, 2026
3.13.2 decryption broken for (older) encrypted files Open

Difficulty 3/5 1-2 days Newbie friendliness 48/100

getsops/sops#2256 · 1 comment · 3 reactions · Opened Jul 15, 2026
Proper subcommands silently shadow colliding global options before the subcommand Open

area/CLI enhancement

Difficulty 4/5 3-5 days Newbie friendliness 55/100

getsops/sops#2254 · 1 comment · Opened Jul 14, 2026
[CNCF TOC] Health Issue - SOPS Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

getsops/sops#2244 · 1 comment · Opened Jul 6, 2026
AWS CLI login credentials are not resolved for KMS AssumeRole unless exported to environment Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

getsops/sops#2240 · 1 comment · Opened Jul 6, 2026
Warn the user when a file has multiple matching creation rules. Open

Difficulty 3/5 1-2 days Newbie friendliness 62/100

getsops/sops#2238 · 3 comments · Opened Jul 2, 2026
creation_rules path_regex not matched against forward-slash paths on Windows Open

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

getsops/sops#2237 · 1 comment · Opened Jul 1, 2026
Enable immutable releases Open

Difficulty 2/5 1-3 hours Newbie friendliness 52/100

getsops/sops#2215 · 5 comments · Opened Jun 11, 2026
decrypt API lacks context.Context support: slow KMS round-trips cannot be cancelled mid-call Open

area/keyservice enhancement

Difficulty 4/5 3-5 days Newbie friendliness 48/100

getsops/sops#2179 · Opened May 11, 2026
[Feature Request]: Add "generic" KMS support via KMIP Provider Open

area/keyservice enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

getsops/sops#2170 · 5 reactions · Opened May 3, 2026
FR: Hashicorp Vault Token File Environment Variable` Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

getsops/sops#2168 · 1 comment · Opened May 3, 2026
SOPS_AGE_KEY_FILE not being able to read from file descriptors in SSS setups Open

enhancement keyservice/age

Difficulty 3/5 1-2 days Newbie friendliness 55/100

getsops/sops#2162 · 2 comments · Opened Apr 29, 2026
Silent value corruption: YAML scalars with underscore-separated digits are mangled on round-trip Open

enhancement not-a-bug stores/yaml

Difficulty 4/5 3-5 days Newbie friendliness 55/100

getsops/sops#2161 · 1 comment · Opened Apr 27, 2026
A slimmed version of sops with age encryption as a Go module? Open

Difficulty 5/5 Over a week Newbie friendliness 38/100

getsops/sops#2157 · 5 comments · 6 reactions · Opened Apr 24, 2026
Critical Vulnerability Finding CVE-2026-34986 Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

getsops/sops#2147 · 9 reactions · Opened Apr 9, 2026
[question] How do you install sops on Debian Trixie? Open

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

getsops/sops#2132 · 4 comments · Opened Apr 1, 2026
Support for p256tag and p256mlkem768tag recipients Open

keyservice/age

Difficulty 3/5 1-2 days Newbie friendliness 55/100

getsops/sops#2129 · 3 comments · 3 reactions · Opened Mar 31, 2026
Does sops set not support encrypted ini files? Open

stores/ini

Difficulty 3/5 1-2 days Newbie friendliness 35/100

getsops/sops#2121 · 1 comment · Opened Mar 26, 2026
Root-level age keys Open

enhancement keyservice/age

Difficulty 2/5 1-3 hours Newbie friendliness 65/100

getsops/sops#2115 · 2 comments · Opened Mar 21, 2026
[Feature] add XML format support Open

area/stores enhancement

Difficulty 4/5 3-5 days Newbie friendliness 55/100

getsops/sops#2067 · 6 comments · 5 reactions · Opened Feb 9, 2026
Creating new sops file fails with `creation_rules` and `key_groups` Open

area/keyservice not-a-bug

Difficulty 4/5 3-5 days Newbie friendliness 38/100

getsops/sops#2041 · 3 comments · Opened Jan 15, 2026
macOS Binary Signing (Developer ID) and .pkg Installer support Open

enhancement os/macos

Difficulty 5/5 Over a week Newbie friendliness 35/100

getsops/sops#2040 · 4 comments · Opened Jan 13, 2026
Proposal: out-of-tree encryption backends Open

area/keyservice enhancement

Difficulty 5/5 Over a week Newbie friendliness 30/100

getsops/sops#2016 · 20 comments · 9 reactions · Opened Dec 13, 2025
support of ssh-agent Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

getsops/sops#2013 · 2 comments · 6 reactions · Opened Dec 10, 2025
[Question] Encrypt using the same data key Open

area/CLI enhancement

Difficulty 5/5 Over a week Newbie friendliness 20/100

getsops/sops#2008 · 1 comment · Opened Dec 5, 2025
SOPS_AGE_SSH_PRIVATE_KEY_FILE fails without an error Open

area/keyservice bug keyservice/age

Difficulty 4/5 3-5 days Newbie friendliness 35/100

getsops/sops#1999 · 4 comments · Opened Nov 17, 2025
Support "Stateless OpenPGP Command Line Interface" for encryption/decryption. Open

area/keyservice enhancement keyservice/pgp

Difficulty 5/5 Over a week Newbie friendliness 25/100

getsops/sops#1982 · 1 reaction · Opened Oct 26, 2025
git textconv failures with added age key Open

area/keyservice keyservice/age keyservice/gcpkms

Difficulty 3/5 1-2 days Newbie friendliness 35/100

getsops/sops#1968 · Opened Oct 11, 2025
Unable to decrypt/encrypt with azkv that uses CNAME alias Open

area/keyservice keyservice/azkv

Difficulty 3/5 1-2 days Newbie friendliness 35/100

getsops/sops#1964 · 3 comments · Opened Oct 1, 2025
Unable to decrypt with PGP on Yubikey Open

area/keyservice keyservice/pgp

Difficulty 4/5 3-5 days Newbie friendliness 25/100

getsops/sops#1952 · 1 reaction · Opened Sep 18, 2025
Broken dotenv output for values with spaces Open

area/stores not-a-bug stores/dotenv

Difficulty 3/5 1-2 days Newbie friendliness 45/100

getsops/sops#1951 · 1 comment · 1 reaction · Opened Sep 18, 2025
add support for AWS Secrets Manager Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

getsops/sops#1942 · 4 reactions · Opened Sep 8, 2025
bool values are not encrypted adequately Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

getsops/sops#1901 · 2 comments · Opened Jul 29, 2025
Missing cli option for SOPS_AGE_KEY_FILE Open

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

getsops/sops#1887 · 3 comments · 2 reactions · Opened Jul 6, 2025
SOPS Decryption Issue with Azure Key Vault Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

getsops/sops#1862 · 1 comment · 5 reactions · Opened May 27, 2025
Exclude regex Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

getsops/sops#1833 · Opened Apr 4, 2025
Allow checksumming of a SOPS encrypted file without decrypting it Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

getsops/sops#1832 · 3 comments · 3 reactions · Opened Apr 4, 2025
Clean up cmd/sops/main.go, get rid of constant Open

refactoring

Difficulty 3/5 1-2 days Newbie friendliness 45/100

getsops/sops#1821 · Opened Mar 30, 2025
Find replacement for github.com/google/shlex Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

getsops/sops#1812 · Opened Mar 25, 2025
error loading config: no matching creation rules found when encryption with inline key parameters (eg: `--age` `--kms`) Open

area/CLI

Difficulty 3/5 1-2 days Newbie friendliness 45/100

getsops/sops#1790 · 5 comments · Opened Mar 7, 2025
Sops EDIT function DOESN'T take latest configuration, was always using original configuration Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

getsops/sops#1788 · 6 comments · 1 reaction · Opened Mar 5, 2025
Encrypted parameter copying with fluxcd - disable authenticated encryption Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

getsops/sops#1774 · 1 comment · Opened Feb 25, 2025
sops filestatus should return an different JSON when creation_rules do not apply Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

getsops/sops#1758 · 2 comments · 1 reaction · Opened Feb 15, 2025

getsops/sops

Get new issues in your inbox