Security on make me: APe

CLI-first Password Manager: Gopass

Tue, 10 Feb 2026 14:00:00 +0000

gopass is a modern, interactive UNIX password manager wrapper designed for secure, multi-store (e.g., combining independent stores like personal and acme for work), and Git-native secret operations. This guide covers setting up gopass from foundation to team-mount configuration utilizing age encryption.

[!TIP] Since gopass is fully backward-compatible with the standard pass directory structure and commands, you can also review my core UNIX Password Manager (pass) Cheat Sheet for standard references.

UNIX Password Manager (pass) Cheat Sheet and Getting Started Guide

Fri, 17 Mar 2023 13:39:51 +0000

This article covers UNIX Password Manager (pass) Cheat Sheet and Getting Started Guide, originally published as a secure GitHub Gist snippet.

`pass` cheat sheet/guide

Getting started guide to the unix password manager pass. Manage gpg encripted passwords (files) in a standar directory-like hierarchy. Such files can be copied or stored in a git repository.

Requirements

Install pass (standard unix password manager):

Ubuntu/Debian:

$ sudo apt-get install pass

Others platforms.

Some Sugar from a DevOps Life: Secure File Syncing & Cloud Secrets

Sat, 21 Jan 2023 14:19:28 +0000

This is a curated collection of secure file synchronization, cloud infrastructure utilities, and secret management recipes compiled from my public GitHub Gists, representing some sweet shortcuts from a DevOps life.

🔑 keyring, secrets management and CLI

Published: 2026-04-01T05:44:09Z | Original Link: Gist Link

# gopass
EDITOR=vi gopass insert me/api/xyz_api_key
XYZ_API_KEY="$(gopass -o me/api/xyz_api_key)"


# python
python -m keyring set XYZ_API_KEY <username>
python -m keyring get XYZ_API_KEY <username>


# MacOS
get_secret() {
 security find-generic-password -a "$USER" -s "$1" -w
}
export XYZ_API_KEY=$(get_secret XYZ_API_KEY)

🔑 gcr.io image statistics

Published: 2024-08-22T08:14:27Z | Original Link: Gist Link

SOPS Secrets Management Integration inside Makefiles

Wed, 29 Jun 2022 11:59:46 +0000

This article covers SOPS Secrets Management Integration inside Makefiles, originally published as a secure GitHub Gist snippet.

seal-sops: ## SOPS Encrypt all secrets path matching [_sec|secret|config|*.secret*]
	@find $(PTH) -path "*/_sec/*" -type f -o -path "*/secret/*" -type f -o -path "*/config/*" -name "*.secret*" -type f |\
		egrep -v '(\.enc|\.asc|\.sealed|\.matrix)' |\
		while read file; do \
		 ./scripts/seal-sops $$file;\
		done;


unseal-sops: ## SOPS Decrypt all secrets (suffix: .enc and .enc.yaml)
	@find $(PTH) -name "*.enc" -type f -o -name "*.enc.*" -type f |\
		while read file; do \
		 ./scripts/unseal-sops $$file;\
		done;
#!/bin/bash -e


# sops-seal, encrypt file if modified (adds .enc before(as) its suffix)
sops-seal() {


 file=$1
 fullname="${file##*/}"
 dirname="${file%/*}"
 basename="${fullname%.*}"
 extension=".${fullname##*.}"


 # If the file is in the same directory with the script,
 # path likely will not include any directory seperator.
 [[ "$dirname" == "$path" ]] && dirname="."


 # If the file has no extension, correct the variable accordingly.
 [[ "$extension" == ".$basename" ]] && extension=""


 # Destination file
 dest="${dirname}/${basename}.enc${extension}";


 [[ ! -e "$dest" ]] && {
 sops -e --output "$dest" "$file";
 } || {
 # if changed
 diff $file <(sops --config ${SOPS_CONFIG:-.sops.yaml} -d "$dest") > /dev/null ||\
 { rm "$dest"; echo " ${dest}"; sops -e --config ${SOPS_CONFIG:-.sops.yaml} --output "$dest" "$file";};
 }
 git add -f ${dest} 
}


sops-seal $@
#!/bin/bash


# sops-unseal, decrypt files (while removing `.enc.` file.enc.suffix)
sops-unseal() {
 for file in $(ls $@); do
 ex=".${file##*.}";
 fp="${file%.enc*}";
 #[[ "$ex" == ".$fp" ]] && ex="" # fix, no filename suffix
 dest="$fp${ex#.enc}";


 echo " ${dest}";
	sops -d --config ${SOPS_CONFIG:-.sops.yaml} --output "$dest" "$file"; \
 done
}


sops-unseal $@

Security on make me: APe

CLI-first Password Manager: Gopass

UNIX Password Manager (pass) Cheat Sheet and Getting Started Guide

pass cheat sheet/guide#

Requirements#