# sops mit Homebrew, apk, chocolatey, MacPorts, Nix, pacman, zypper, scoop, winget installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für sops in AI-Agent-Workflows.

## Installation

```sh
sudo av install brew:sops
```

Weitere Installationsbefehle:

### macOS

- Homebrew (100%):

```sh
brew install sops
```

  Evidenz: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install sops
```

  Evidenz: MacPorts ports tree: security/sops/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- apk (92%):

```sh
sudo apk add sops
```

  Evidenz: Alpine Linux edge package indexes: sops from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

- Nix (92%):

```sh
nix profile install nixpkgs#sops
```

  Evidenz: nixpkgs package indexes: pkgs/by-name/so/sops/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- pacman (92%):

```sh
sudo pacman -S sops
```

  Evidenz: Arch Linux sync databases: sops from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

- zypper (92%):

```sh
sudo zypper install sops
```

  Evidenz: openSUSE Tumbleweed package metadata: sops from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst

### Windows

- Chocolatey (92%):

```sh
choco install sops
```

  Evidenz: Chocolatey community package catalog: sops from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','skaffold'

- Scoop (92%):

```sh
scoop install main/sops
```

  Evidenz: Scoop official bucket manifest trees: bucket/sops.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

- winget (92%):

```sh
winget install --id Mozilla.SOPS -e
```

  Evidenz: Windows Package Manager source index: Mozilla.SOPS from https://cdn.winget.microsoft.com/cache/source.msix

## Paketfakten

- **Paketschlüssel:** brew:sops
- **Paketmanager:** Homebrew
- **Version:** 3.13.3
- **Quellzusammenfassung:** Editor of encrypted files
- **Homepage:** <https://getsops.io/>
- **Repository:** <https://github.com/getsops/sops>
- **Zuletzt aktualisiert:** 2026-07-26T04:03:43+02:00
- **Generiert:** 2026-08-03T19:37:03+00:00

## Executables

- sops (Alias)

## Installationsverhalten

- Bottle: nicht verfügbar

## Version und Aktualität

- Seite generiert: 2026-08-03
- Manager-Version: 3.13.3
## Projektgeschichte und Nutzung

SOPS, Secrets OPerationS, is a command-line editor for encrypted files. It is widely used to keep YAML, JSON, ENV, INI, and binary files encrypted while integrating with key systems such as AWS KMS, GCP KMS, Azure Key Vault, age, and PGP.

### Projektgeschichte

The official README and docs say SOPS was initially launched at Mozilla in 2015 by Adrian Utrilla and Julien Vehent. The project later moved under the `getsops` organization and was donated to the Cloud Native Computing Foundation as a Sandbox project in 2023.

SOPS grew out of operational pain around hand-managed PGP-encrypted files. Its official credits name hiera-eyaml, credstash, sneaker, password-store, and years of manual PGP management as inspirations.

### Adoptionsgeschichte

SOPS became a standard secrets-management CLI in infrastructure repositories because it encrypts values in structured files while leaving enough metadata for automated decryption by CI, deployment tools, and operators with the right identities.

The package-manager metadata in this batch shows broad adoption across Homebrew, Alpine, Chocolatey, MacPorts, Nix, Arch, Scoop, winget, and openSUSE. That cross-platform packaging reflects how often SOPS is used both on developer laptops and in automation.

### Wie es verwendet wird

A typical SOPS workflow is to create or edit an encrypted file with `sops`, commit the encrypted file, and decrypt or publish it only where the configured KMS, age, PGP, Vault/OpenBao, or cloud identity allows access.

Projects commonly keep `.sops.yaml` at a repository root to define `creation_rules` for new files. The official docs say SOPS recursively looks for `.sops.yaml` and that other names require an explicit `--config` option.

### Warum Paket-Nerds sich dafür interessieren

SOPS is package-nerd significant because it solved a painful operational gap with a small CLI instead of a central secrets service: encrypted structured files could live in Git and still be edited safely.

Its package spread also shows the modern DevOps pattern of one portable binary becoming shared workflow glue across macOS laptops, Linux CI runners, Windows machines, and Kubernetes-oriented tooling.

### Zeitleiste

- 2015: SOPS launched as a Mozilla project.
- 2023: SOPS donated to CNCF as a Sandbox project.
- 2026: SOPS v3.13.2 released on GitHub.

### Related projects

- hiera-eyaml, credstash, sneaker, and password-store are named by the SOPS project as inspirations.
- age, PGP, AWS KMS, GCP KMS, Azure Key Vault, HashiCorp Vault, OpenBao, and other KMS integrations are central to SOPS usage.
- Kubernetes secret workflows and GitOps repositories are common operational contexts for SOPS, even though SOPS itself remains a standalone CLI.

### Quellen

- <https://api.github.com/repos/getsops/sops>
- <https://api.github.com/repos/getsops/sops/releases>
- <https://getsops.io/docs/>
- <https://getsops.io/docs/usage/identities/config-file/>
- <https://github.com/getsops/sops>
- input.json source_facts.package-manager


## Sicherheitshinweise

Für sops wurde kein passendes lokales Secret-Handling-Manifest gefunden. Nucleus-Paketmetadaten bleiben hier veröffentlicht, damit künftige Abdeckung eine stabile Paket-URL hat.



## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: .sops.yaml
## Andere Paketmanager-Einträge

- Nix - sops: normalized package name match | nixpkgs package indexes: pkgs/by-name/so/sops/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- apk - sops - 3.12.2-r2: normalized package name match | Alpine Linux edge package indexes: sops from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Simple and flexible tool for managing secrets | https://github.com/getsops/sops
- pacman - sops - 3.13.3-1: normalized package name match | Arch Linux sync databases: sops from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | Editor of encrypted files that supports YAML, JSON, ENV, INI and BINARY formats | https://github.com/getsops/sops
- zypper - sops - 3.13.3-1.2: normalized package name match | openSUSE Tumbleweed package metadata: sops from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Simple and flexible tool for managing secrets | https://github.com/getsops/sops
- MacPorts - sops: normalized package name match | MacPorts ports tree: security/sops/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
- Chocolatey - sops: normalized package name match | Chocolatey community package catalog: sops from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','skaffold'
- Scoop - main/sops: normalized package name match | Scoop official bucket manifest trees: bucket/sops.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1
- winget - Mozilla.SOPS: normalized package name match | Windows Package Manager source index: Mozilla.SOPS from https://cdn.winget.microsoft.com/cache/source.msix
- winget - SecretsOPerationS.SOPS: normalized package name match | Windows Package Manager source index: SecretsOPerationS.SOPS from https://cdn.winget.microsoft.com/cache/source.msix


## Combined YAML source

View the package source record on GitHub. [combined/sops.yml](https://github.com/mxcl/pkgdb/blob/main/combined/sops.yml)


## Quellen

- pkg.so package database
- Geiger risk classifier
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph