3 ms·
Interesting script! Really dig how it harvest pubkeys from a GitHub org. Does it support fine grained control of which secrets are available for decryption by a
by nurple 2y ago
Interesting script! Really dig how it harvest pubkeys from a GitHub org. Does it support fine grained control of which secrets are available for decryption by a particular key?
- tarasglek 2y agoMy script just sets up default .sops.yaml for https://github.com/getsops/sops https://github.com/getsops/sops You can further edit .sops.yaml(eg have multiple of them) and decide how you split secrets in your directory tree to further customize who can decrypt the secrets. It works pretty well for prod/dev splits, etc