Stretch - Provide a way to redact sensitive values that are not encrypted using SOPS about ploigos-step-runner

[itewk]

@dwinchell the framework is there for this, you jsut need to add different types of decryptors. https://github.com/ploigos/ploigos-step-runner/blob/main/src/ploigos_step_runner/config/config_value_decryptor.py

So in theroy you could add a decryptor that looks for keys that have a specific name and treat them as something to decrypt. that will add them to the list of things to obfuscate even if the value doesn't actually ahve to be decrypted

[dwinchell]

@itewk Perfect. Thanks for pointing us in the right direction.

[itewk]

then for the new decypor i would have a default set of keys that are automatically treated as "secret" so like ".password." maybe something about ".private." or ssl or something but then have a config option to provide addtional other keys to treat as secret.

....resisting urge to go into programing mode.....