@mydoomfr@mamot.fr Good point, and thanks for the link! I’ve added the SOPS pre-commit and CI checks to the TODO list An OpenBao follow-up is also in progress, covering use cases where storing encrypted secrets in Git is no longer enough