$clihub

sops

CLI

Secrets management tool supporting YAML, JSON, and .env files.

Encrypt secrets in YAML/JSON/ENV files with AWS KMS, GCP KMS, or age

4 curated recipes · not yet executed by the harness#secrets#encryption#vault#kubernetes

Recipes

Curated from documentation and usage. Percentages are estimates, not measurements.

Encrypt a YAML secrets file

~93% est.
sops --encrypt secrets.yaml > secrets.enc.yaml
Common failures (1)
  • No master keys foundConfigure .sops.yaml with your key ARN/fingerprint

Set a value in an encrypted file without an editor

sops set secrets.enc.yaml '["api_key"]' '"new-value"'
Common failures (1)
  • unknown command "set" for "sops"sops set needs 3.9+; older versions take sops --set '["api_key"] "new-value"' secrets.enc.yaml

Edit encrypted file in-place

~95% est.
sops secrets.enc.yaml

Decrypt to stdout

~97% est.
sops --decrypt secrets.enc.yaml

Install

Homebrewbrew install sops

Agent notes

When to use
Managing encrypted secrets in git repositories

Use from an agent

curl -s https://clihub.com/api/tools/sops | jq '.agentHints.provenRecipes[] | {task, command, verified}'

Or call get_tool with slug sops on the MCP server at https://clihub.com/mcp.

Homepage ↗MPL-2.02 views