clan/clan-core
11
2
Fork 13
Code Issues 90 Pull Requests 4 Actions Packages Projects 1 Releases Wiki Activity

sops: pass empty manifest when decrypting
All checks were successful
build / test (pull_request) Successful in 28s
Details

Browse Source
This commit is contained in:
Jörg Thalheim 2023-08-10 12:05:17 +02:00
parent 0640c1a436
commit c2ff6acef4
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
pkgs/clan-cli/clan_cli/secrets/sops.py
View File

@ -162,7 +162,10 @@ def encrypt_file(
def decrypt_file(secret_path: Path) -> str:
cmd = nix_shell(["sops"], ["sops", "--decrypt", str(secret_path)])
with sops_manifest([]) as manifest:
cmd = nix_shell(
["sops"], ["sops", "--config", str(manifest), "--decrypt", str(secret_path)]
)
res = subprocess.run(cmd, check=True, stdout=subprocess.PIPE, text=True)
return res.stdout