Skip to content

Repository files navigation

sops-tui

A k9s-inspired terminal UI for managing SOPS-encrypted secrets.

Browse, decrypt, edit, add, and rotate your SOPS secrets — all from the terminal.

Features

  • Browse — Tree view of all SOPS-encrypted files in your repo
  • Inspect — View encrypted keys at a glance without decrypting
  • Decrypt & View — Reveal secret values on demand
  • Edit — Modify values with automatic re-encryption
  • Add — Insert a new key/value into a file (n in the detail view)
  • Rotate — Generate new random values for secrets
  • k9s-style UX — Keyboard-driven, vim-like navigation, command palette

Keybindings

Press ? in any view for the full, context-aware list. Common detail-view keys:

Key Action
j / k Move down / up
enter / l Expand · h collapse
r / R Reveal / hide one · all values
e / E Edit value inline · in $EDITOR
n Add a new secret (key path + value)
X Rotate (generate a new random value)
a / d Add / remove an age recipient
ctrl+y Copy revealed value to clipboard
b Git history for the file
esc Back to the file list

Status

Early development. Not yet functional.

Stack

  • Go + Bubble Tea (Elm architecture TUI framework)
  • SOPS + age encryption backend

Verified Terminals

The chrome (k9s-style header, info panel, breadcrumb chips) was visually verified during the v1.1 release on the following Linux terminal emulators. Other terminals are expected to work — community-contributed reports welcome.

Terminal Version Tested OS Status Notes
Alacritty latest Linux Verified Reference TrueColor combo.
Ghostty latest Linux Verified Different rendering pipeline; chrome behaves identically.
tmux (nested in Alacritty) latest Linux Verified Double alt-screen interaction confirmed clean.
VSCode integrated terminal latest Linux Verified xterm.js; no 1-row offset on chrome enter/exit.
macOS Terminal macOS Community-contributed reports welcome Open a terminal-bug issue
iTerm2 macOS Community-contributed reports welcome Open a terminal-bug issue
Windows Terminal Windows Community-contributed reports welcome Open a terminal-bug issue
WSL2 (any terminal) Linux/Windows Community-contributed reports welcome Open a terminal-bug issue

If you hit a chrome rendering issue on a terminal not yet verified, file a terminal bug using the terminal-bug template — include terminal name, version, OS, expected behaviour, observed behaviour, and a screenshot.

Requirements

  • Go 1.22+
  • sops installed and configured
  • age key available at ~/.config/sops/age/keys.txt

License

AGPL-3.0

About

k9s-inspired TUI for managing SOPS-encrypted secrets

Resources

Stars

3 stars

Watchers

0 watching

Forks

Releases

Packages

Contributors

Languages