getsops / sops

Simple and flexible tool for managing secrets
https://getsops.io/
Mozilla Public License 2.0
17.11k stars 879 forks source link

Should `set`/`--set` takes it value from a file rather than a command line parameter? #1623

Open lopter opened 2 months ago

lopter commented 2 months ago

At least as an option, in order to avoid a sensitive value from being leaked in the process list?

felixfontein commented 2 months ago

Reading the values optionally from a file sounds like a good idea to me. (Making that the default would be a breaking change.)

csoleimani commented 1 month ago

+1