SOPS
Command-line tool that encrypts individual values inside YAML, JSON, and other config files, so secrets can be safely committed to git.
- Actively maintained
- Well documented
Overview
SOPS (Secrets OPerationS) encrypts just the values in a structured file - not the whole file - so a git diff still shows which keys changed, while the actual secret values stay encrypted using a key management backend like AWS KMS, GCP KMS, or PGP. This lets a team keep secrets alongside the rest of their configuration in version control instead of storing them separately.
SOPS is a fit for teams practicing GitOps who need secrets to live safely inside the same git repository as everything else, commonly paired with tools like Flux or Argo CD (also in this catalog) that sync configuration from git.
Why it's in this catalog
Catalog rating: ★★★★☆ (4/5)
The standard tool for encrypting secrets in Git, a focused and widely adopted pick.
- Mature
- Community-driven
- Categories
- DevOps
- Languages
- Go
- License
- MPL-2.0
Related Projects
Argo CD
Apache-2.0The leading GitOps continuous delivery tool for Kubernetes, automatically syncing your cluster state to match what's defined in git.
Actively maintained
- DevOps
Flux
Apache-2.0GitOps continuous delivery tool for Kubernetes that keeps a cluster's state synchronized with a git repository, a genuine alternative to Argo CD.
Actively maintained
- DevOps
Flagger
Apache-2.0Progressive delivery operator that automates canary, blue-green, and A/B deployments for Kubernetes with automatic rollback on failure.
Actively maintained
- DevOps
Cilium
Apache-2.0eBPF-based networking, security, and observability platform for Kubernetes that replaces traditional networking components with kernel-level performance.
Actively maintained
- DevOps
Spotted an error? Suggest an edit on GitHub.