A GitHub action that can be used to decrypt a SOPS encrypted file.

Inputs

version

Required Version of SOPS binary that has to be used to decrypt the file

file

Required Relative path to the SOPS encrypted file that has to be decrypted

gpg_key

Required Base64 encoded private GPG key that can decrypt the file

output_type

Default: json

Format to which the decrypted secrets should be converted. Formats supported are json, yaml, dotenv.

Outputs

data

Decrypted data in selected format

Example usage

jobs:
  decrypt-secrets:
    runs-on: ubuntu
    steps:
      - uses: metro-digital/sops-decrypt@v0.x
        id: secrets
        with:
          version: '3.6.1'
          file: 'ci/secrets/file1.yaml'
          gpg_key: '<private_gpg_key_base64_encoded>'
          output_type: 'json'
      - name: Access one of the decrypted secrets
        run: |
          echo "${{ fromJson(steps.secrets.outputs.data).secret_key }}"