Tous les Skills / BAGELHOLE

bagelhole/devops-security-agent-skills

sops-encryption

Encrypt files and configs with Mozilla SOPS.

Mode d’emploi

Copiez la commande et examinez le paquet avant de l’installer dans votre environnement agent.
Consultez le document original pour les outils, identifiants et environnements requis.
Décrivez les entrées et le livrable souhaité ; comparez la sortie aux sources.

npx skills add https://github.com/bagelhole/devops-security-agent-skills --skill sops-encryption

Avant de commencer

L’installation n’inclut ni abonnement au modèle, ni quota API, ni accès aux fichiers.
Étoiles et installations reflètent l’activité, pas un test indépendant de qualité ou de sécurité.

Document Skill original

Rendu depuis le dépôt source en conservant titres, exemples, code, tableaux, liens et images.

SOPS Encryption

Encrypt secrets in configuration files while keeping structure visible.

When to Use This Skill

Use this skill when:

Encrypting secrets in Git
Implementing GitOps with secrets
Managing Kubernetes secrets as code
Encrypting configuration files

Prerequisites

SOPS installed
KMS access (AWS, GCP, Azure) or PGP key

Installation

bash

# macOS
brew install sops

# Linux
wget https://github.com/getsops/sops/releases/download/v3.8.0/sops-v3.8.0.linux.amd64
chmod +x sops-v3.8.0.linux.amd64
mv sops-v3.8.0.linux.amd64 /usr/local/bin/sops

Basic Usage

bash

# Encrypt with AWS KMS
sops --encrypt --kms arn:aws:kms:region:account:key/key-id secrets.yaml > secrets.enc.yaml

# Decrypt
sops --decrypt secrets.enc.yaml

# Edit encrypted file
sops secrets.enc.yaml

# Encrypt in place
sops --encrypt --in-place secrets.yaml

Configuration

yaml

# .sops.yaml
creation_rules:
  - path_regex: .*\.prod\.yaml$
    kms: arn:aws:kms:us-east-1:account:key/prod-key
  - path_regex: .*\.dev\.yaml$
    kms: arn:aws:kms:us-east-1:account:key/dev-key
  - path_regex: .*
    pgp: fingerprint

Kubernetes Integration

yaml

# encrypted secret
apiVersion: v1
kind: Secret
metadata:
  name: myapp-secrets
type: Opaque
stringData:
  password: ENC[AES256_GCM,data:encrypted...]
sops:
  kms:
    - arn: arn:aws:kms:region:account:key/key-id

bash

# With ArgoCD
# Install ksops plugin for ArgoCD to decrypt secrets

Best Practices

Store .sops.yaml in repository
Use different keys per environment
Rotate encryption keys regularly
Never commit unencrypted secrets
Use key aliases for readability

Related Skills

hashicorp-vault - Centralized secrets
argocd-gitops - GitOps integration

Tâches connexes

du même dépôt

Autres Skills

Tous les Skills

agent-evals

Build automated evaluation suites for AI agents using golden datasets, rubrics, and regression gates. Use when shipping agent features, validating prompt changes, or gating deployments on quality.

installations: 1
GitHub Stars: 1,2 k
Mis à jour: 22 mai

Voir les détails →

ai-agent-security

Secure AI agents against prompt injection, tool abuse, and data exfiltration with defense-in-depth controls. Use when building, deploying, or hardening agentic AI systems that invoke tools, access data, or interact with production infrastructure.

installations: 1
GitHub Stars: 1,2 k
Mis à jour: 22 mai

Voir les détails →

ai-pipeline-orchestration

Orchestrate AI/ML pipelines for data ingestion, model training, batch inference, and RAG indexing using Prefect, Airflow, or Dagster. Build reliable, observable, and retriable workflows for production AI systems.

installations: 1
GitHub Stars: 1,2 k
Mis à jour: 22 mai

Voir les détails →

ai-security-hardening

Harden AI/LLM deployments against prompt injection, data exfiltration, model theft, and supply chain attacks. Covers input validation, output filtering, access control, model API security, and compliance controls for production AI systems.

installations: 1
GitHub Stars: 1,2 k
Mis à jour: 22 mai

Voir les détails →