sopsy
SOPS Python wrapper library
Decision gist · record as of 2026-08-14
Yes, if you are already using SOPS for secret management and need Python integration. The low install friction and permissive license make it straightforward to add. However, be aware that the repository is archived and abandoned—use it only if you are comfortable maintaining it yourself or if your SOPS version and Python environment are stable enough not to require upstream fixes.AI-flagged interpretation of the facts on this page — verify before relying
Before you install
- The SOPS binary must be installed and available in your $PATH before SOPSy can function (e.g., via brew install sops or your system package manager).
- Low install friction; pure Python wheel with a single runtime dependency (pyyaml).
- However, the repository is archived and marked abandoned as of the latest release on 2025-07-26, which signals no active maintenance going forward.
License · maintenance · safety
MIT (permissive) — MIT license is permissive; you can use, modify, and distribute SOPSy freely in commercial and private projects with minimal restrictions.
last release 2025-07-26 (384 days) · last repo commit 2025-07-26 · 28 stars · archived
0 known vulnerabilities (OSV.dev, 2026-08-14) · 223,832 downloads/mo, #9,239 on PyPI
Alternatives
Verify before relying
pip install sopsy
from sopsy import Sops
sops = Sops("secrets.yml")
my_secret = sops.get("my_secret_key")
all_secrets = sops.decrypt()- Whether the archived repository will receive security patches or bug fixes in the future.
- Compatibility of SOPSy with future versions of SOPS or Python beyond 3.8.
What it is and what it does
SOPSy is a Python wrapper around the SOPS command-line encryption tool, allowing you to programmatically encrypt, decrypt, and retrieve secrets from YAML and JSON files. It abstracts away direct CLI invocation, letting you work with encrypted files through a simple Python API—calling methods like `get()` to retrieve individual secrets or `decrypt()` to load all secrets at once.
The package requires the SOPS binary to be installed separately on your system. It depends only on pyyaml for parsing, making it lightweight. However, the repository is now archived and abandoned, meaning no new features or security updates are planned, though the last commit was recent (2025-07-26).
Use it for
- Load encrypted secrets from a YAML or JSON file in a Python application at runtime without exposing plaintext.
- Retrieve a single secret value by key from an encrypted file for use in configuration or authentication.
- Encrypt plaintext configuration files programmatically using SOPS encryption rules defined in a `.sops.yml` file.
- Integrate SOPS-encrypted secrets into a Python deployment or CI/CD pipeline that needs to manage multiple environments.
Worth the install?
AI-flagged interpretation of the facts on this page. Verify before relying on it.
Yes, if you are already using SOPS for secret management and need Python integration.
The low install friction and permissive license make it straightforward to add. However, be aware that the repository is archived and abandoned—use it only if you are comfortable maintaining it yourself or if your SOPS version and Python environment are stable enough not to require upstream fixes.
Install
sopsy on PyPI
Before you install
Low install friction; pure Python wheel with a single runtime dependency (pyyaml). However, the repository is archived and marked abandoned as of the latest release on 2025-07-26, which signals no active maintenance going forward.
The SOPS binary must be installed and available in your $PATH before SOPSy can function (e.g., via brew install sops or your system package manager).
License in practice
MIT license is permissive; you can use, modify, and distribute SOPSy freely in commercial and private projects with minimal restrictions.
Quickstart
pip install sopsy
from sopsy import Sops
sops = Sops("secrets.yml")
my_secret = sops.get("my_secret_key")
all_secrets = sops.decrypt()Verify before relying
- Whether the archived repository will receive security patches or bug fixes in the future.
- Compatibility of SOPSy with future versions of SOPS or Python beyond 3.8.
Package facts
| License | MIT permissive |
| Python support | Supports the current Python release >=3.8 |
| Install friction | Low. Pure-Python wheel |
| Runtime dependencies | 1 packagepyyaml |
| Maintenance | Abandoned 384 days since the last release |
| Last repo commit | repository archived |
| First released | |
| Downloads | 223,832 / month, #9,239 on PyPI 30-day window, as of 2026-08-14 |
| Known vulnerabilities | None known OSV.dev, checked 2026-08-14 |
| Classifiers | Development Status :: 5 - Production/StableIntended Audience :: DevelopersIntended Audience :: System AdministratorsLicense :: OSI Approved :: MIT LicenseOperating System :: OS IndependentProgramming Language :: Python :: 3Topic :: Security :: CryptographyTopic :: Software Development :: Libraries :: Python ModulesTyping :: Typed |
Evidence: sopsy-1.2.1-py3-none-any.whl
Tags
Let your AI agent find packages like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 14,416 PyPI packages by what they can do, searchable in plain language.
wish › “sops python wrapper”
- sopsySOPSy wraps the SOPS command-line tool to encrypt, decrypt, and…
- pipebioA Python SDK for the PipeBio cloud platform that enables programmatic…
- dbs3-pycurlProvides a Python client wrapper around pycurl for making HTTP…
Give your agent the search over MCP, or paste the wish link into any chat.
More Python Modules packages
Converts domain names between Unicode and ASCII-compatible encoding (Punycode) according to IDNA 2008 and Unicode Technical Standard 46, with security validation and broader script coverage than the standard library.
Install it if you work with internationalized domain names, need to validate domains, or use HTTP clients that depend on it transitively.
Setuptools is a Python build backend and package management tool that handles building, distributing, and installing Python packages, including support for C/C++ extension modules.
PyYAML parses and emits YAML 1.1 data format, enabling serialization and deserialization of configuration files and Python objects to and from human-readable YAML text.
Pydantic validates Python data structures against type hints, coercing and checking input at runtime to ensure it matches a declared schema.
Provides reusable metadata objects for use with PEP-593 `typing.Annotated` to express common constraints like bounds, collection sizes, and predicates on types.
Install it if you use or build libraries that need to express type constraints in a standardized, inspectable way—or if you want to annotate your own types with…
Provides runtime tools to inspect and introspect Python type annotations, enabling programmatic examination of type hints at execution time.
See also crypto · aws-encryption-sdk-cli · eciespy · kasa-crypt · PGPy · gnupg · aws-encryption-sdk · onepassword · pyAesCrypt · http-ece