studio/actions
0
0 Fork 0
Code Issues 4 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

actions: add SOPS decryption action

Browse Source
This commit is contained in:
alessandrovitali committed 2026-10-08 01:57:51 +02:00
1 parent f4bcd353ee
commit 4bfb62fb27
2 files changed
+60
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

sops/README.md
+5
View File
@@ -0,0 +1,5 @@
# secret handling with SOPS
generate new age keys with `age-keygen -o ~/.config/sops/age/key-name.txt`. encrypt local secrets with `sops -e service-name/.env > service-name/.sops.env`.
the action installs the pinned, checksum-verified SOPS build for the runner's OS/arch and decrypts every `*.sops.*` file except `.sops.yaml`, writing `service-name/.sops.env` back to `service-name/.env` via a temp file and atomic move.