fix: decrypt SOPS .env keys written with export or spaces #78

2026-10-15T12:17:00+02:00

keb commented

2026-10-15 12:17:00 +02:00

sops keeps everything before the = in a dotenv key, so export TOKEN=… is the key export TOKEN. lazysecrets asked sops for TOKEN and the value couldn't be decrypted, from the list or a link.

The sops path is the key as written; names and links are unchanged.
A link finds its key's path in the file, as the list does, instead of rebuilding it from the name.

🤖 Generated with Claude Code

sops keeps everything before the `=` in a dotenv key, so `export TOKEN=…` is the key `export TOKEN`. lazysecrets asked sops for `TOKEN` and the value couldn't be decrypted, from the list or a link. - The sops path is the key as written; names and links are unchanged. - A link finds its key's path in the file, as the list does, instead of rebuilding it from the name. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

keb added 1 commit 2026-10-15 12:17:00 +02:00

fix: decrypt SOPS .env keys written with export or spaces

CI / Checks (pull_request) Successful in 37s

Details

PR title / Conventional title (pull_request) Successful in 1s

Details

ee688c6c9b

sops keeps everything before the = in a dotenv key, so `export TOKEN=…`
is the key `export TOKEN`. lazysecrets asked sops for `TOKEN` and the
value couldn't be decrypted, from the list or a link.

- The sops path is the key as written; names and links are unchanged.
- A link finds its key's path in the file, as the list does, instead of
  rebuilding it from the name.

keb merged commit 39cbac9aab into main

2026-10-15 12:18:09 +02:00

keb deleted branch fix/sops-dotenv-export

2026-10-15 12:18:09 +02:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: keb/lazysecrets#78