Tools Practical By Samson Tanimawo, PhD Published Jan 29, 2026 4 min read

sops for Encrypted Secrets in Git

sops encrypts files for git storage.

Usage

sops --kms key encrypts a file. Key in AWS KMS or similar.

Encrypted file safe to commit.

sops decrypt file.enc.yaml decrypts in place.

CI uses KMS access to decrypt.

git-crypt for symmetric. Vault for runtime secrets.

sops fits IaC and config workflows.