sops: add cache

Add GH runner caching for ephemeral runners
This commit is contained in:
alessandrovitali committed 2026-10-10 06:14:29 +02:00
1 parent d4ee61aee7
commit fceda20751
2 files changed
+33 -4

No files matched your search

+1 -1
View File
@@ -2,4 +2,4 @@
generate new age keys with `age-keygen -o ~/.config/sops/age/key-name.txt`. encrypt local secrets with `sops -e service-name/.env > service-name/.sops.env`.
the action installs the pinned, checksum-verified SOPS build for the runner's OS/arch and decrypts every `*.sops.*` file except `.sops.yaml`, writing `service-name/.sops.env` back to `service-name/.env` via a temp file and atomic move.
the action installs the pinned, checksum-verified SOPS build for the runner's OS/arch, caching it under `$RUNNER_TEMP/sops` keyed on the version and runner platform so later runs skip the download. it then decrypts every `*.sops.*` file except `.sops.yaml`, writing `service-name/.sops.env` back to `service-name/.env` via a temp file and atomic move.