workspace-manager/.workspace-ops/templates/secrets-sops.md

Project Secret Management

This project follows the workspace SOPS guide: .workspace-ops/docs/secrets-sops.md.

Secret Policy

• Raw secret values are never tracked.
• Encrypted secret files use SOPS when tracked secret material is required.
• Local decryption identities and decrypted outputs stay ignored.

Project Layout

Item	Path / Owner
SOPS policy	확인 필요
Encrypted secrets	확인 필요
Local identity	ignored local profile
Runtime injection	확인 필요
Validation	확인 필요

Validation

# Example only. Replace with the project-specific encrypted file.
sops -d <encrypted-secret-file> >/dev/null

# Project-specific config or smoke command.
<project-validation-command>

Notes

• Document secret names and injection paths, not values.
• Link build credentials back to this guide rather than duplicating them.