Sops Alternatives

Similar projects and alternatives to sops

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a better sops alternative or higher similarity.

Suggest an alternative to sops

Reviews and mentions

Posts with mentions or reviews of sops. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2021-10-16.
  • Not sure if DevOps, but a few questions.
    reddit.com/r/devops | 2021-10-16
    SOPS is a great tool for managing secrets: https://github.com/mozilla/sops
  • Secure Key Management in GraphJin the instant GraphQL to SQL service
    reddit.com/r/golang | 2021-10-12
    The `graphjin secrets` command will open an editor where you can type in your secure environment variables on saving those will be encrypted and saved. In production those variables will be decrypted and used by GraphJin after fetching the decryption key from your cloud key management service. the secrets management has been built using the Mozilla SOPS library https://github.com/mozilla/sops
  • Just a reminder that the Twitch leak is mostly in GO
    reddit.com/r/golang | 2021-10-07
    Or something cross-cloud like https://github.com/mozilla/sops
  • Trying to install MySQL (&Wordpress)
    reddit.com/r/docker | 2021-10-03
    Note: The secrets file should be generated by the CI/CD at the runtime and should not be in the version control. If you want the secrets file to be in the version control, then you should at least encrypt them and decrypt at the runtime. The encryption/decryption part can be done easily with sops. Which one is the best? Depends, but that's a different topic... Whatever suits you and your needs :)
  • What's your best practice to backup these sensitive files containing credentials sprinkled through projects?
  • Ask HN: What do you use GPG for?
    news.ycombinator.com | 2021-09-01
    Let's say you bought one of those expensive Yubikeys; the U2F stuff works well enough, and you're wondering if there's anything useful to use GPG for.

    Deriving SSH keys, or working with locally encrypted secrets (via [sops](https://github.com/mozilla/sops) for instance) could maybe be something. What use cases do you have where you find GPG useful?

  • HELM SECRETS
    sops
  • How to secure secrets within a docker image?
    reddit.com/r/docker | 2021-08-27
    I've recently learnt sops and for Django have combined that with dynaconf although it should work fine with any python.
  • Amber, Encrypted secrets management
    reddit.com/r/devops | 2021-08-18
    Interesting post, but aside from the language(s) involved, how does this differ from sops?
  • Using secrets in kube prom stack helm chart
    reddit.com/r/devops | 2021-08-16
    The other approach I've used is an external system to encrypt a secrets.yaml file. More specifically I've used [sops](https://github.com/mozilla/sops) with AWS's KMS for encrypting a file that gets committed along side the non-encrypted values.yaml file. Then you use sops to run helm but it decrypts the file on-the-fly and the secrets are only available to the helm process while it runs. So something like this `sops exec-file secrets.yaml 'helm install ... --values=values.yaml --values={}`. They key part is `--values={}` which will inject the path of the on-the-fly decrypted secrets file.
  • Automation assistants: GitOps tools in comparison
    dev.to | 2021-08-12
    SOPS that was developed by Mozilla offers significantly more options, though at the expense of a more complex configuration. Here, the key material can come from the key management systems (KMS) of the major cloud providers, from your own HashiCorp Vault, or from configured PGP keys. SOPS itself does not contain an operator, but there are different ways to use it with GitOps. Flux v2 offers native support. There is also the helm-secrets plug-in, which can also be used in ArgoCD with the manual configuration. There is also a sops-secrets operator that has been developed by a third party.
  • How to manage Terraform within a team (company)
    reddit.com/r/Terraform | 2021-08-04
    If you have sensitive information, you can start with using SOPS to create Keyrings in Azure where only you have access to. Then use the Keys to encrypt Terraform files with sensitive infos. This is a easy and good start.
  • Question about secrets inside git repositories and how to deal with them
    reddit.com/r/devops | 2021-08-02
    A much, much better alternative is Mozilla SOPS. Just encrypt the YAML values but leave the keys readable (there's an option to encrypt also a whole text blob, but YAML is where it shines). Pluggable backend - you can use GPG, but also KMS or many others. Decrypt function native in Terragrunt, ArgoCD, Flux, Helm, and many others.
    reddit.com/r/devops | 2021-08-02
    Have a look at Mozilla SOPS https://github.com/mozilla/sops
  • Securing Terraform IaC with Regula
    reddit.com/r/devops | 2021-07-30
    I'm not familiar with SOPS specifically, but if you're referring to this project from Mozilla, that does seem to have a different focus - on secrets management - while Regula helps catch security issues and misconfigurations in Terraform, CloudFormation, etc.

Stats

Basic sops repo stats
40
8,381
5.5
9 days ago

mozilla/sops is an open source project licensed under Mozilla Public License 2.0 which is an OSI approved license.

SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com
Find remote Go jobs at our new job board 99remotejobs.com. There are 7 new remote jobs listed recently.
Are you hiring? Post a new remote job listing for free.