[PR #21] [CLOSED] chore: bootstrap SOPS secrets helper and dev env vault #32

New Issue

2026-02-16T04:15:17-05:00

yindo commented

2026-02-16 04:15:17 -05:00

📋 Pull Request Information

Original PR: https://github.com/run-llama/semtools/pull/21
Author: @paulbettner
Created: 9/6/2025
Status: ❌ Closed

Base: main ← Head: chore/sops-bootstrap-20250906202428

📝 Commits (2)

88ee48a chore: bootstrap SOPS secrets helper and dev env vault
1f960ca chore(ci,secrets): add SOPS decrypt action + smoke workflow; README secrets section

📊 Changes

7 files changed (+294 additions, -0 deletions)

View changed files

➕ .github/actions/sops-setup/action.yml (+50 -0)
➕ .github/workflows/secrets_sops_smoke.yml (+20 -0)
📝 .gitignore (+3 -0)
➕ .secrets/dev.env.enc (+7 -0)
➕ .sops.yaml (+4 -0)
📝 README.md (+14 -0)
➕ scripts/secrets (+196 -0)

📄 Description

This PR bootstraps SOPS + age for this repo.\n\nIncluded:\n- .sops.yaml (encrypts .secrets/*.env.enc to age recipient)\n- scripts/secrets helper (pull | edit | import | doctor)\n- .secrets/dev.env.enc placeholder (encrypted)\n- .gitignore hardened for backups\n\nUsage:\n- Edit repo vault: scripts/secrets edit dev\n- Pull merged view (with org defaults if present): make secrets.pull && make secrets.doctor\n- Global dev defaults: add to Smarty-Pants-Inc/secrets/global/workstation.env.enc, then refresh locallly: sops -d --input-type dotenv --output-type dotenv global/workstation.env.enc > ~/.config/smarty/global.env\n\nCI: If workflows need env, decrypt .secrets/dev.env.enc to .env.local with SOPS using the repo age key.\n

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/run-llama/semtools/pull/21 **Author:** [@paulbettner](https://github.com/paulbettner) **Created:** 9/6/2025 **Status:** ❌ Closed **Base:** `main` ← **Head:** `chore/sops-bootstrap-20250906202428` --- ### 📝 Commits (2) - [`88ee48a`](https://github.com/run-llama/semtools/commit/88ee48a0f7fb12ce269b86223fe328a32c2e2aa2) chore: bootstrap SOPS secrets helper and dev env vault - [`1f960ca`](https://github.com/run-llama/semtools/commit/1f960ca92673f0ce7ff2e8630f79ac5623b6027d) chore(ci,secrets): add SOPS decrypt action + smoke workflow; README secrets section ### 📊 Changes **7 files changed** (+294 additions, -0 deletions) <details> <summary>View changed files</summary> ➕ `.github/actions/sops-setup/action.yml` (+50 -0) ➕ `.github/workflows/secrets_sops_smoke.yml` (+20 -0) 📝 `.gitignore` (+3 -0) ➕ `.secrets/dev.env.enc` (+7 -0) ➕ `.sops.yaml` (+4 -0) 📝 `README.md` (+14 -0) ➕ `scripts/secrets` (+196 -0) </details> ### 📄 Description This PR bootstraps SOPS + age for this repo.\n\nIncluded:\n- .sops.yaml (encrypts .secrets/*.env.enc to age recipient)\n- scripts/secrets helper (pull | edit | import | doctor)\n- .secrets/dev.env.enc placeholder (encrypted)\n- .gitignore hardened for backups\n\nUsage:\n- Edit repo vault: `scripts/secrets edit dev`\n- Pull merged view (with org defaults if present): `make secrets.pull && make secrets.doctor`\n- Global dev defaults: add to `Smarty-Pants-Inc/secrets/global/workstation.env.enc`, then refresh locallly: `sops -d --input-type dotenv --output-type dotenv global/workstation.env.enc > ~/.config/smarty/global.env`\n\nCI: If workflows need env, decrypt `.secrets/dev.env.enc` to `.env.local` with SOPS using the repo age key.\n --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

yindo added the pull-request label 2026-02-16 04:15:17 -05:00

yindo closed this issue

2026-02-16 04:15:17 -05:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: run-llama/semtools#32