2026-09-01 07:01 UTC
@foudreclair@piaille.fr Nice! The next step would be to add a Git pre-hook to prevent pushing non-SOPS encrypted files to Git. This happens more often than you might think :)
https://oneuptime.com/blog/post/2026-03-13-how-to-set-up-sops-pre-commit-hooks-for-flux-repositories/view
Replies (1)
-
@foudreclair@piaille.fr 2026-09-02 06:35
@mydoomfr@mamot.fr Good point, and thanks for the link! I’ve added the SOPS pre-commit and CI checks to the TODO list An OpenBao follow-up is also in progress, covering use cases where storing encrypted secrets in Git is no longer enough