Merge pull request 'add dummy sops manifest' (#101) from Mic92-mic92 into main
All checks were successful
build / test (push) Successful in 20s

This commit is contained in:
clan-bot 2023-08-08 14:47:19 +00:00
commit 9addbc8918

View File

@ -138,14 +138,17 @@ def encrypt_file(
folder.mkdir(parents=True, exist_ok=True)
# hopefully /tmp is written to an in-memory file to avoid leaking secrets
with NamedTemporaryFile(delete=False) as f:
with NamedTemporaryFile(delete=False) as dummy_manifest_file, NamedTemporaryFile(
delete=False
) as f:
try:
with open(f.name, "w") as fd:
if isinstance(content, str):
fd.write(content)
else:
shutil.copyfileobj(content, fd)
args = ["sops"]
# we pass an empty manifest to pick up existing configuration of the user
args = ["sops", "--config", dummy_manifest_file.name]
for key in keys:
args.extend(["--age", key])
args.extend(["-i", "--encrypt", str(f.name)])