Alternatives to SOPS
Encrypts values inside YAML, JSON and env files so they can live in Git. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
SOPS
Encrypts values inside YAML, JSON and env files so they can live in Git.
Replacements
Listings that take over the same core job as SOPS.
Infisical
Open-source platform for storing and distributing application secrets.
Infisical stores secrets in a separate self-hostable service with versioning, audit logs and a Kubernetes operator instead of encrypted files in Git, and some enterprise features are paid.
Doppler
Hosted secrets manager that syncs environment variables across environments.
Doppler is a hosted, closed-source secrets manager that syncs environment variables across environments through a CLI, so secrets are held by Doppler, and the free tier suits small teams.
git-crypt
A command-line tool that transparently encrypts selected files in a Git repository.
git-crypt encrypts whole selected files transparently during normal Git use, instead of encrypting only values inside YAML, JSON and env files.
transcrypt
A shell script that transparently encrypts chosen files stored in a Git repository.
transcrypt encrypts chosen files automatically on commit and checkout using a shared password, rather than age, PGP or cloud key management services.
Also worth comparing
These listings name SOPS as their own alternative, so the relationship runs both ways.
Sealed Secrets
A Kubernetes controller and command-line tool that encrypts Secrets so they can be stored in Git.
SOPS encrypts values inside YAML, JSON and env files for Git without an in-cluster controller. It works with age, PGP and cloud key services, and it is not limited to Kubernetes.
Similar software
Related functionality, not a direct replacement.
direnv
Loads and unloads environment variables as you change directory.
OpenTofu
Describe and manage infrastructure with versioned configuration files.
Conftest
Writes tests against configuration files using Open Policy Agent rules.
mise
Keep project tools, environment variables and tasks in one configuration.
Terraform
An infrastructure-as-code command-line tool for creating, changing and versioning cloud and on-premises infrastructure.
Helm
A package manager for Kubernetes that installs, upgrades and rolls back applications described as charts.
