Skip to content

Clarify encryption and decryption command usage - avoiding corrupt secrets due to IDE behaviour #146

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
DavisAre wants to merge 3 commits into
base: master
Choose a base branch
from
Open

Clarify encryption and decryption command usage - avoiding corrupt secrets due to IDE behaviour #146

Changes from 2 commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
49f8f05
Clarify encryption and decryption command usage
DavisAre May 6, 2026
0844ce8
Formatting fix
DavisAre May 6, 2026
a0ba61f
Typo fix.
DavisAre May 6, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 4 additions & 2 deletions docs/encrypting_sensitive_configuration.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -42,7 +42,7 @@ Or, if you have the encryption key stored as a local environment variable, use t
silta secrets encrypt --file /path/to/file --secret-key-env ENV_VAR_NAME
```

Note that `silta secrets encrypt` encrypts the source file itself unless you specify a different target path via the `--output-file` flag (see full docs [here](https://github.com/wunderio/silta-cli/blob/master/docs/silta_secrets_encrypt.md))
crNote that `silta secrets encrypt` encrypts the source file itself unless you specify a different target path via the `--output-file` flag (see full docs [here](https://github.com/wunderio/silta-cli/blob/master/docs/silta_secrets_encrypt.md)).
Comment thread
DavisAre marked this conversation as resolved.
Outdated

### 3. Add decryption to CircleCI configuration

Expand Down Expand Up @@ -117,7 +117,9 @@ or, if you have secret key stored as local environment variable:
silta secrets decrypt --file /path/to/encrypted/file --secret-key-env ENV_VAR_NAME
```

Note that `silta secrets decrypt` decrypts the source file itself unless you specify the`--output-file` flag. See full docs of the decryption command [here](https://github.com/wunderio/silta-cli/blob/master/docs/silta_secrets_decrypt.md)
Note that `silta secrets decrypt` decrypts the source file itself unless you specify the`--output-file` flag. See full docs of the decryption command [here](https://github.com/wunderio/silta-cli/blob/master/docs/silta_secrets_decrypt.md).

Note for users of vscode and other IDE users - if enabled, the autoformat functionality may cause for binary or decrypted files to be slightly UTF-8 adjusted which leads to a corrupt sercrets file. Thus it's recommended to use `--output-file` as it will bypass IDE file watch / autoformat functionality.

Remember **not to** commit decrypted secret files!

Expand Down
Loading