getsops/sops

diff shows entire file has changed

chaporgin opened this issue · 1 comments

Hi! With recent upgrades sops 3.7.3 -> sops 3.8.1 (latest) we noticed that the whole file now is changed, even when changing a single key in YAML. However, the docs claim

https://raw.githubusercontent.com/getsops/sops/main/README.rst

  • diffs are meaningful. If a single value of a file is modified, only that
    value will show up in the diff. The diff is still limited to only showing
    encrypted data, but that information is already more granular that
    indicating that an entire file has changed.

Can you please share your understanding, is this a bug, or now it's an untended behavior?

I did a quick test, the only thing that changed for me in a larger file was a value I edited, and the encrypted value of a comment. Everything else didn't change.

Can you provide instructions how to reproduce this with the 3.7.3 and 3.8.1 binaries?