SOPS

encrypt

sops -e -i FILE

decrypt

sops -d -i FILE

edit

sops FILE

encrypt with regex

sops -e -i --encrypted-regex '^(data|stringData)$' FILE