# 使用 Homebrew, apk, chocolatey, MacPorts, Nix, pacman, zypper, scoop, winget 安装 sops

查看 sops 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

## 安装

```sh
sudo av install brew:sops
```

其他安装命令:

### macOS

- Homebrew (100%):

```sh
brew install sops
```

  证据: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install sops
```

  证据: MacPorts ports tree: security/sops/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- apk (92%):

```sh
sudo apk add sops
```

  证据: Alpine Linux edge package indexes: sops from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

- Nix (92%):

```sh
nix profile install nixpkgs#sops
```

  证据: nixpkgs package indexes: pkgs/by-name/so/sops/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- pacman (92%):

```sh
sudo pacman -S sops
```

  证据: Arch Linux sync databases: sops from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

- zypper (92%):

```sh
sudo zypper install sops
```

  证据: openSUSE Tumbleweed package metadata: sops from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst

### Windows

- Chocolatey (92%):

```sh
choco install sops
```

  证据: Chocolatey community package catalog: sops from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','skaffold'

- Scoop (92%):

```sh
scoop install main/sops
```

  证据: Scoop official bucket manifest trees: bucket/sops.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

- winget (92%):

```sh
winget install --id Mozilla.SOPS -e
```

  证据: Windows Package Manager source index: Mozilla.SOPS from https://cdn.winget.microsoft.com/cache/source.msix

## 软件包事实

- **软件包键:** brew:sops
- **软件包管理器:** Homebrew
- **版本:** 3.13.3
- **来源摘要:** Editor of encrypted files
- **主页:** <https://getsops.io/>
- **仓库:** <https://github.com/getsops/sops>
- **最后更新:** 2026-07-26T04:03:43+02:00
- **已生成:** 2026-08-03T19:37:03+00:00

## 可执行文件

- sops (别名)

## 安装行为

- Bottle: 不可用

## 版本和新鲜度

- 页面生成时间: 2026-08-03
- 管理器版本: 3.13.3
## 项目历史与用法

SOPS, Secrets OPerationS, is a command-line editor for encrypted files. It is widely used to keep YAML, JSON, ENV, INI, and binary files encrypted while integrating with key systems such as AWS KMS, GCP KMS, Azure Key Vault, age, and PGP.

### 项目历史

The official README and docs say SOPS was initially launched at Mozilla in 2015 by Adrian Utrilla and Julien Vehent. The project later moved under the `getsops` organization and was donated to the Cloud Native Computing Foundation as a Sandbox project in 2023.

SOPS grew out of operational pain around hand-managed PGP-encrypted files. Its official credits name hiera-eyaml, credstash, sneaker, password-store, and years of manual PGP management as inspirations.

### 采用历史

SOPS became a standard secrets-management CLI in infrastructure repositories because it encrypts values in structured files while leaving enough metadata for automated decryption by CI, deployment tools, and operators with the right identities.

The package-manager metadata in this batch shows broad adoption across Homebrew, Alpine, Chocolatey, MacPorts, Nix, Arch, Scoop, winget, and openSUSE. That cross-platform packaging reflects how often SOPS is used both on developer laptops and in automation.

### 使用方式

A typical SOPS workflow is to create or edit an encrypted file with `sops`, commit the encrypted file, and decrypt or publish it only where the configured KMS, age, PGP, Vault/OpenBao, or cloud identity allows access.

Projects commonly keep `.sops.yaml` at a repository root to define `creation_rules` for new files. The official docs say SOPS recursively looks for `.sops.yaml` and that other names require an explicit `--config` option.

### 为什么软件包爱好者会关心

SOPS is package-nerd significant because it solved a painful operational gap with a small CLI instead of a central secrets service: encrypted structured files could live in Git and still be edited safely.

Its package spread also shows the modern DevOps pattern of one portable binary becoming shared workflow glue across macOS laptops, Linux CI runners, Windows machines, and Kubernetes-oriented tooling.

### 时间线

- 2015: SOPS launched as a Mozilla project.
- 2023: SOPS donated to CNCF as a Sandbox project.
- 2026: SOPS v3.13.2 released on GitHub.

### Related projects

- hiera-eyaml, credstash, sneaker, and password-store are named by the SOPS project as inspirations.
- age, PGP, AWS KMS, GCP KMS, Azure Key Vault, HashiCorp Vault, OpenBao, and other KMS integrations are central to SOPS usage.
- Kubernetes secret workflows and GitOps repositories are common operational contexts for SOPS, even though SOPS itself remains a standalone CLI.

### 来源

- <https://api.github.com/repos/getsops/sops>
- <https://api.github.com/repos/getsops/sops/releases>
- <https://getsops.io/docs/>
- <https://getsops.io/docs/usage/identities/config-file/>
- <https://github.com/getsops/sops>
- input.json source_facts.package-manager


## 安全说明

没有找到 sops 的匹配本地密钥处理 manifest。Nucleus 软件包元数据仍在此发布，以便未来覆盖拥有稳定的软件包 URL。



## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: .sops.yaml
## 其他软件包管理器记录

- Nix - sops: normalized package name match | nixpkgs package indexes: pkgs/by-name/so/sops/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- apk - sops - 3.12.2-r2: normalized package name match | Alpine Linux edge package indexes: sops from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Simple and flexible tool for managing secrets | https://github.com/getsops/sops
- pacman - sops - 3.13.3-1: normalized package name match | Arch Linux sync databases: sops from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | Editor of encrypted files that supports YAML, JSON, ENV, INI and BINARY formats | https://github.com/getsops/sops
- zypper - sops - 3.13.3-1.2: normalized package name match | openSUSE Tumbleweed package metadata: sops from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Simple and flexible tool for managing secrets | https://github.com/getsops/sops
- MacPorts - sops: normalized package name match | MacPorts ports tree: security/sops/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
- Chocolatey - sops: normalized package name match | Chocolatey community package catalog: sops from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','skaffold'
- Scoop - main/sops: normalized package name match | Scoop official bucket manifest trees: bucket/sops.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1
- winget - Mozilla.SOPS: normalized package name match | Windows Package Manager source index: Mozilla.SOPS from https://cdn.winget.microsoft.com/cache/source.msix
- winget - SecretsOPerationS.SOPS: normalized package name match | Windows Package Manager source index: SecretsOPerationS.SOPS from https://cdn.winget.microsoft.com/cache/source.msix


## Combined YAML source

View the package source record on GitHub. [combined/sops.yml](https://github.com/mxcl/pkgdb/blob/main/combined/sops.yml)


## 来源

- pkg.so package database
- Geiger risk classifier
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph