ErrLookup › getsops/sops

getsops/sops

Simple and flexible tool for managing secrets · Go · 58 source files

Analyzed at 13442bb981 on 2026-09-01. 203 documented errors.

Code / Message	Type	Severity	Tags
an scrypt recipient must be the only one	error_code	error
errors.New(sb.String())	error_code	error
error emitting binary store	error_code	error
JSON Indentation parameter smaller than -1 is not accepted	error_code	error
YAML Negative indentation not accepted	error_code	error
Input string %s does not match sops' data format	error_code	error
Error base64-decoding data: %s	error_code	error
Error base64-decoding iv: %s	error_code	error
Error base64-decoding tag: %s	error_code	error
Could not decrypt with AES_GCM: %s	error_code	error
Unknown datatype: %s	error_code	error	sops, aes, decryption, unsupported-type
Could not initialize AES GCM encryption cipher: %s	error_code	critical	sops, aes, encryption, invalid-key-length
Could not generate random bytes for IV: %s	error_code	critical	sops, aes, encryption, random, entropy
Could not create GCM: %s	error_code	critical	sops, aes, gcm, encryption, crypto
Error marshaling timestamp %q: %w	error_code	error	sops, aes, encryption, timestamp, marshal
Value to encrypt has unsupported type %T	error_code	error	sops, aes, encryption, unsupported-type, type-switch
incorrect passphrase	error_code	error	age, passphrase, decryption, scrypt, keyfile
failed to decrypt identity file: %v	error_code	error	age, identity, decryption, corrupt-file, keyfile
could not read passphrase: %v	error_code	error	age, passphrase, non-interactive, ci, scrypt
failed to read '%s': %w	error_code	error	age, io, file-read, identity, permissions
failed to read '%s': file too long	error_code	error
gpg-agent passphrase request errored: %s	error_code	error
failed to parse '%s' age identities: %w	error_code	error
failed to parse and add to age identities: %w	error_code	error
failed to create writer for encrypting sops data key with ag	error_code	error
failed to encrypt sops data key with age: %w	error_code	error
failed to close writer for encrypting sops data key with age	error_code	error
failed to close armored writer: %w	error_code	error
%s: %w%s%s	error_code	error
%s%s%s	error_code	error
failed to copy age decrypted data into bytes.Buffer: %w	error_code	error	age, decryption, io
failed to parse command %s: %w	error_code	error	age, shell, env-var, shlex
failed to execute command %s: %w	error_code	error	age, exec, env-var, command
failed to open %s file: %w	error_code	error	age, file-io, env-var, permissions
user config directory could not be determined: %w	error_code	error	age, config, env-var, platform
failed to open file: %w	error_code	error	age, file-io, permissions
failed to parse input as Bech32-encoded age public key: %w	error_code	error	age, bech32, recipient, parsing
failed to parse input as age key from age plugin: %w	error_code	error	age, plugin, recipient, exec
failed to parse input as age-ssh public key: %w	error_code	error	age, ssh, recipient, parsing
failed to parse input, unknown recipient type: %q	exception	error
unknown identity type	exception	error
the SSH key returned by running SOPS_AGE_SSH_PRIVATE_KEY_CMD	exception	error
malformed SSH identity returned by running SOPS_AGE_SSH_PRIV	exception	error
failed to obtain public %q key for %q SSH key: %w	exception	error
failed to read %q: %w	exception	error
failed to parse %q: %w	exception	error
failed to open file: %w	exception	error
failed to read file: %w	exception	error
could not read passphrase for %q: %v	exception	error
could not create encrypted SSH identity: %w	exception	error	age, ssh, key-parsing, unsupported-key-type
malformed SSH identity in %q: %w	exception	error	age, ssh, key-parsing, invalid-key-file
Pinging audit database failed: %s	exception	critical	postgres, database, connectivity, audit
Database malfunction: SELECT 1 should return 1, but returned	exception	error	postgres, database, sanity-check, audit
could not parse %q into a valid Azure Key Vault MasterKey %v	exception	error	azure, key-vault, url-parsing, config
failed to get Azure token credential to retrieve key version	exception	error	azure, authentication, credential, key-vault
failed to construct Azure Key Vault client to retrieve key v	exception	error	azure, key-vault, client-construction, url-validation
failed to fetch Azure Key to retrieve key version: %w	exception	error	azure, key-vault, getkey, permissions, network
failed to get Azure token credential to encrypt data: %w	exception	error	azure, authentication, credential, encryption
failed to construct Azure Key Vault client to encrypt data:	exception	error	azure, key-vault, client-construction, encryption
failed to encrypt sops data key with Azure Key Vault key '%s	exception	error	azure, key-vault, encryption, authentication
failed to get Azure token credential to decrypt: %w	exception	error	azure, authentication, credentials, decryption
failed to base64 decode Azure Key Vault encrypted key: %w	exception	error	azure, base64, decryption, data-corruption
failed to construct Azure Key Vault client to decrypt data:	exception	error	azure, key-vault, configuration, client
failed to decrypt sops data key with Azure Key Vault key '%s	exception	error	azure, key-vault, decryption, permissions
config file not found	exception	warning	configuration, sops, file-not-found
invalid %s key configuration: expected string in list, got %	exception	error	configuration, yaml, type-mismatch, sops
invalid %s key configuration: expected string, []string, or	exception	error	configuration, yaml, type-mismatch, sops
Could not unmarshal config file: %s	exception	error	yaml, configuration, parsing, sops
invalid %s key configuration: %w	exception	error	configuration, sops, yaml, key-groups
could not read config file: %s	exception	error	config, file-io, sops
error loading config: %s	exception	error	config, yaml, parse-error, sops
error loading config: cannot use more than one of encrypted_	exception	error	config, validation, creation-rules, sops
error loading config: no matching destination found in confi	exception	error	config, destination-rules, sops
error loading config: more than one destinations were found	exception	error	config, destination-rules, validation, sops
can not compile regexp: %w	exception	error	config, regex, validation, sops
error loading config: no matching creation rules found	exception	error	config, creation-rules, path-matching, sops
Failed to read %q: %w	exception	error	file-io, decryption, go, sops
Failed to decrypt original mac: %w	exception	critical	decryption, mac, integrity, sops
Failed to verify data integrity. expected mac %q, got %q	exception	critical	decryption, mac, integrity, tampering, sops
cannot create GCP KMS service: %w	exception	error	gcp, kms, credentials, encryption
failed to encrypt sops data key with GCP KMS key: %w	exception	error	gcp, kms, encryption, iam
failed to decrypt sops data key with GCP KMS key: %w	exception	error	gcp, kms, decryption, iam
no valid resource ID found in %q	exception	error	gcp, kms, validation, configuration
credentials: failed to obtain credentials from %q: %w	exception	error	gcp, credentials, env-var, adc
invalid key ID format: expected 'region:key-uuid', got %q	exception	error	huaweicloud, kms, validation, configuration
region cannot be empty in key ID: %q	exception	error	huaweicloud, kms, validation, configuration
key UUID cannot be empty in key ID: %q	exception	error	huaweicloud, kms, validation, configuration
failed to create HuaweiCloud KMS client: %w	exception	error	huaweicloud, kms, credentials, encryption, network
failed to encrypt sops data key with HuaweiCloud KMS: %w	exception	error	huaweicloud, kms, encryption, cloud
encryption response missing ciphertext	exception	error	huaweicloud, kms, encryption, empty-response
failed to decrypt sops data key with HuaweiCloud KMS: %w	exception	error	huaweicloud, kms, decryption, cloud
decryption response missing plaintext	exception	error	huaweicloud, kms, decryption, empty-response
failed to base64 decode decrypted data key: %w	exception	error	huaweicloud, kms, base64, decryption
failed to get HuaweiCloud credentials: %w	exception	error	huaweicloud, credentials, environment, authentication
invalid region %q: %w	exception	error	huaweicloud, kms, region, configuration
%s's entry %d is empty	exception	error	vault, configuration, environment, allowlist
missing scheme in Vault URL (should be like this: +https://v	exception	error	vault, url-parsing, configuration
failed to encrypt sops data key to Vault transit backend '%s	exception	error	vault, transit, encryption, network, authentication
failed to decrypt sops data key from Vault transit backend '	exception	error	vault, transit, decryption, authentication, ciphertext
transit backend is empty	exception	error	vault, transit, empty-response, encryption
no encrypted data	exception	error	vault, transit, kms, go
encrypted ciphertext cannot be cast to string	exception	error	vault, transit, type-mismatch, go
no decrypted data	exception	error	vault, transit, kms, go
decrypted plaintext data cannot be cast to string	exception	error	vault, transit, type-mismatch, go
cannot decode base64 plaintext into data key bytes	exception	error
Allowlist does not allow %s	exception	error
cannot create Vault client: %w	exception	error
cannot get Vault token: %w	exception	error
error getting user's home directory: %w	exception	error
running Vault with a prefixed URL is not supported! (Format	exception	error
vault path does not seem to be formatted correctly: (eg. htt	exception	error
failed to encrypt sops data key with AWS KMS: %w	exception	error
error base64-decoding encrypted data key: %s	exception	error
failed to decrypt sops data key with AWS KMS: %w	exception	error
no valid ARN found in '%s'	exception	error	aws, kms, config, validation
could not load AWS config: %w	exception	error	aws, kms, config, credentials
failed to assume role '%s': %w	exception	error	aws, kms, sts, iam, network
failed to construct STS session name: %w	exception	error	aws, sts, hostname, environment
failed to create new GnuPG home: %w	exception	error	gnupg, pgp, filesystem, tempdir
cannot import armored key data into GnuPG keyring: %w	exception	error	gnupg, pgp, validation, key-import
cannot read armored key data from file: %w	exception	error	gnupg, pgp, filesystem, file-not-found
empty GNUPGHOME path	exception	error	gnupg, pgp, validation
GNUPGHOME must be an absolute path	exception	error	gnupg, pgp, validation, path
GNUPGHOME does not exist	exception	error	gnupg, pgp, validation, filesystem
cannot stat GNUPGHOME: %w	exception	error	gnupg, filesystem, permissions
GNUGPHOME is not a directory	exception	error	gnupg, filesystem, configuration
GNUPGHOME has invalid permissions: got %#o wanted %#o	exception	error	gnupg, permissions, security
github.com/ProtonMail/go-crypto/openpgp error: %w	exception	error	gnupg, openpgp, encryption, keyring
GnuPG binary error: %w	exception	error	gnupg, gpg-binary, encryption, subprocess
could not encrypt data key with PGP key: %w	exception	error	gnupg, openpgp, encryption, aggregate-error
failed to encrypt sops data key with pgp: %s	exception	error	gnupg, gpg-binary, encryption, subprocess
could not decrypt data key with PGP key: %w	exception	critical	gnupg, openpgp, decryption, aggregate-error
could not load secring: %s	exception	error
armor decoding failed: %s	exception	error
reading PGP message failed: %s	exception	error
the key could not be decrypted with any of the PGP entries	exception	error
failed to decrypt sops data key with pgp: %s	exception	error
failed to decrypt sops data key with pgp: zero bytes returne	exception	error
key with fingerprint '%s' is not available in keyring	exception	error
function passphrasePrompt called too many times	exception	error
could not establish connection with gpg-agent: %s	exception	error
gpg-agent passphrase request errored: %s	exception	error
no key to unlock	exception	error	pgp, gpg, key-decryption, go
unable to load SDK config: %w	exception	error	aws, s3, configuration, go
parts cannot be less than threshold	validation	error	shamir, validation, argument-error, go
parts cannot exceed 255	validation	error	shamir, validation, limits, go
threshold must be at least 2	validation	error	shamir, validation, argument-error, go
threshold cannot exceed 255	validation	error	shamir, validation, limits, go
cannot split an empty secret	validation	error	shamir, validation, empty-input, go
failed to generate polynomial: %w	exception	error	shamir, cryptography, randomness, entropy, go
less than two parts cannot be used to reconstruct the secret	validation	error	shamir, validation, argument-error, go
parts must be at least two bytes	validation	error	shamir, validation, corrupt-data, go
all parts must be the same length	validation	error
duplicate part detected	validation	error
invalid dotenv input line: %s	validation	error
Error marshaling metadata: %s	exception	error
cannot use complex value in dotenv file; offending key %s	validation	error
the dotenv store only supports emitting strings, got %T	validation	error
Duplicate value	validation	error
Type mismatch	validation	error
Incomplete list	validation	error
Error while unflattening %q: %w	exception	error
Found non-string key %q when unflattening	validation	error	go, sops, type-mismatch, flatten
Error while unflattening: %w	exception	error	go, sops, flatten, malformed-input
Internal error: cannot find root	exception	error	go, sops, internal-error, type-assertion
Found key collision %q while flattening	validation	error	go, sops, key-collision, flatten
Found non-string key %q when flattening	validation	error	go, sops, type-mismatch, flatten
Error encoding section %s: %s	exception	error	go, sops, ini, encoding
Error encoding section: Section values should always be Tree	validation	error	go, sops, ini, type-mismatch
Error encoding key: %s	exception	error	go, sops, ini, encoding
Could not unmarshal input data: %s	exception	error	go, sops, ini, parsing
Error marshaling metadata: %s	exception	error	go, sops, ini, metadata, serialization
Error marshaling to INI: %s	exception	error
Binary files are not structured and extracting a single valu	exception	error
Expected JSON object key, got %s of type %T instead	validation	error
Error encoding value %s: %s	exception	error
Error encoding key %s: %s	exception	error
SOPS only supports JSON files with a top-level object (start	exception	error
SOPS only supports JSON files with a top-level object (start	exception	error
Could not unmarshal input data: %s	exception	error	json, unmarshal, parsing, input-validation
Error marshaling metadata: %s	exception	error	metadata, serialization, sops
Error marshaling to json: %s	exception	error	json, marshal, tree, serialization
Unexpected key type %T	validation	error	tree, keys, type-conversion, internal
Found duplicate %v entry	validation	error	metadata, corruption, duplicate-key, sops
Found %v entry that is not a mapping	validation	error	metadata, structure, mapping, corruption
Internal error: unexpected metadata conversion result %T	exception	error	internal, invariant, metadata, bug
Error while serializing metadata: %w	exception	error	metadata, serialization, sops
Error while flattening metadata: %w	exception	error	metadata, flattening, serialization
Found key %q in encrypted data, which starts with the reserv	error_code	error	reserved-key, metadata, naming-collision, sops
Found key %q in encrypted data, which is a reserved key used	error_code	error
Cannot use more than one of encrypted_suffix, unencrypted_su	validation	error
No keys found in file	error_code	error
YAML documents that are sequences are not supported	error_code	error
YAML documents that are values are not supported	error_code	error
Error unmarshaling input YAML: %s	error_code	error
Error marshaling metadata: %s	error_code	error
Error marshaling to YAML: %s	error_code	error
unexpected status code: %d	http	error
missing Location header	http	error
unexpected Location header: %s	http	error
GitHub API request failed: %v	http	error
GitHub API request failed with status code: %d	http	error
connectStr: %s, err	console	error