SOPS v3.13.3 released on 23-07-2026
SOPS v3.13.3 is out now. Operators and security-conscious deployers can install prebuilt binaries, verify signed checksums and image signatures, and inspect SLSA provenance and SBOM artifacts.
Download the release and find installation, verification and provenance instructions on the project’s GitHub release page and the full changelog linked in the release assets.
What’s in this release
- Prebuilt binaries with signed checksums; instructions for verifying the checksums signature with cosign and confirming integrity with sha256sum.
- Container images published on ghcr.io and quay.io for linux/amd64 and linux/arm64 (Debian-based images include GnuPG and cloud KMS deps; Alpine images are slimmer).
- SLSA provenance (in-toto JSONL) and per-binary SPDX SBOM JSON artifacts bundled with the release, with guidance for verification using slsa-verifier.
Upgrade notes
- No breaking changes are reported for v3.13.3; consult the full changelog for the complete list of fixes and dependency bumps: https://github.com/getsops/sops/compare/v3.13.2…v3.13.3
- If you need to revert, reinstall the previous release from the project’s GitHub releases (install the v3.13.2 binary or image as required).
Share any problems or observations on your experience with v3.13.3 so others can benefit from practical verification and upgrade notes.
