otty / apps
All apps/SOPS

SOPS

sops

Simple and flexible tool for managing secrets.

Runs as sops|macOS, Linux, Windows|github.com
Open form in Otty otty.toml

Command form

ai-draft · 4 tasks · 16 fields

Encrypt or decrypt a file with sops. Editing, key rotation, key groups, publish and key-service options are left out.

Opens the form; the finished command lands at your prompt, unrun
Run in Otty
otty gui sops

sops decrypt

Decrypt a file

Decrypt a file and print it to stdout, or write it elsewhere.

Decrypt a fileExample values, fixed in this page — nothing here reaches a terminal
Basic
Encrypted file*
file
Extract key
string
Advanced
Output type
5 choicesenum
TasksEach one presets the form for one job
Print decrypted
fileextractoutput_type
Decrypt to a file
fileoutputoutput_type
ParametersOnly these flags are editable in the form
Encrypted file
path · positional 0
Decrypt in place
boolean
--in-place-i
Output file
path
--output
Extract key
string
--extract
Input type
enum
--input-typejsonyamldotenvinibinary
Output type
enum
--output-typejsonyamldotenvinibinary

sops encrypt

Encrypt a file

Encrypt a file for age, PGP or cloud KMS recipients and print it to stdout, or write it elsewhere.

Encrypt a fileExample values, fixed in this page — nothing here reaches a terminal
Basic
Plaintext file*
file
age recipients*
string
Output file
file
Advanced
Encrypted key regex
string
TasksEach one presets the form for one job
Encrypt for age
fileageoutputencrypted_regex
Encrypt in place
filein_placeagepgpkms
ParametersOnly these flags are editable in the form
Plaintext file
path · positional 0
Encrypt in place
boolean
--in-place-i
Output file
path
--output
age recipients
Comma separated list of age recipients.
string
--age-a
PGP fingerprints
Comma separated list of PGP fingerprints.
string
--pgp-p
KMS ARNs
Comma separated list of KMS ARNs.
string
--kms-k
Encrypted key regex
string
--encrypted-regex
Unencrypted key regex
string
--unencrypted-regex
Input type
enum
--input-typejsonyamldotenvinibinary
Output type
enum
--output-typejsonyamldotenvinibinary
SourcesEvery flag above is checked against these
help
decrypt [file]: decrypt a file, and output the results to stdout. If no filename is provided, stdin will be used. --in-place, -i write output back to the same file instead of stdout --extract extract a specific key or branch from the input document. --output Save the output after decryption to the file specified --input-type currently json, yaml, dotenv,…
help

github.com

help
encrypt [file]: encrypt a file, and output the results to stdout. If no filename is provided, stdin will be used. --in-place, -i write output back to the same file instead of stdout --output Save the output after encryption to the file specified --age, -a comma separated list of age recipients --pgp, -p comma separated list of PGP fingerprints --kms, -k…
help

github.com

Before it fills your prompt, Otty checks the installed sops against its version. A form that does not match your version is not offered.