studio/actions
0
0 Fork 0
Code Issues 4 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

sops: guard SOPS re-download / overwrite

Browse Source
This commit is contained in:
alessandrovitali committed 2026-10-12 03:49:40 +02:00
1 parent c8186c43c3
commit 18b1fdb6b4
2 files changed
+4 -2
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

sops/README.md
+1 -1
View File
@@ -2,4 +2,4 @@
generate new age keys with `age-keygen -o ~/.config/sops/age/key-name.txt`. encrypt local secrets with `sops -e service-name/.env > service-name/.sops.env`.
the action installs the pinned, checksum-verified SOPS build for the runner's OS/arch and decrypts every `*.sops.*` file except `.sops.yaml`, writing `service-name/.sops.env` back to `service-name/.env` via a temp file and atomic move.
the action installs the pinned, checksum-verified SOPS build for the runner's OS/arch (skipping the download when `sops` is already on `PATH`, e.g. on the custom `studio/actions:ubuntu-latest` runner image) and decrypts every `*.sops.*` file except `.sops.yaml`, writing `service-name/.sops.env` back to `service-name/.env` via a temp file and atomic move.