Encrypt secrets with SOPS and GPG (PGP)

Put your GPG fingerprint in .sops.yaml creation_rules, then sops -e. Values are encrypted, keys stay readable, safe to commit.

August 24, 2026 · 3 min