Table of Contents

Namespace Nops.Core

Classes

AgeEntry

Entry for age master key in .sops metadata.

Comment

Represents a YAML/Dotenv comment node in the tree.

KeyGroup

A SOPS key group. With Shamir secret sharing there is one encrypted share per group (see ShamirThreshold); otherwise a single group has the whole data key encrypted under every key it contains.

KeyGroupEntry

A single master-key reference inside a key group: the provider key type (e.g. "age", "pgp", "aws_kms") and the encrypted data-key share.

MacMismatchException

Thrown when the file or one of its encrypted values fails authentication: the file was edited without sops, or it is truncated or corrupt. Decryption never returns values from a file that fails this check unless ThrowOnMacMismatch is turned off.

PgpEntry

Entry for PGP master key in .sops metadata.

SopsFile

Main entry point for SOPS file decryption. Loads, decrypts, and returns ordered trees, flattened key-values, or typed objects.

SopsMetadata

SOPS metadata extracted from the .sops top-level key in YAML/JSON files. Fields map directly to the .sops dict keys (case-exact).

SopsMetadataException

Thrown when the sops metadata block of a file is missing or structurally invalid.

SopsOptions

Options for SOPS file decryption. An options bag (not positional arguments).

SopsTree

Represents a parsed and/or decrypted SOPS file as an ordered tree.

TreeBranch

An ordered branch of TreeItems. Preserves insertion order for MAC/AAD computation. A branch may represent a mapping (keys are strings) or a sequence/array (keys are int indices, indicated by IsSequence). Sequences do NOT contribute their index to the SOPS AAD/MAC path.

TreeItem

A single key-value item in the SOPS tree. Key is either a string, an int (array index) or a Comment.