sopsenc

var (
	// ErrNoRule is returned when no creation rule of the .sops.yaml matches a
	// secret file's path; such a file is never committed in plaintext.
	ErrNoRule = errors.New("no creation rule matches")
	// ErrNoRecipients is returned for a creation rule without age recipients;
	// age public keys are the only key type the package encrypts for.
	ErrNoRecipients = errors.New("creation rule has no age recipients")
)

var (
	// ErrDuplicatePath is returned when a fileset names one path twice.
	ErrDuplicatePath = errors.New("duplicate file path")
	// ErrGeneratedInPlainFile is returned when a file that is not a secret file
	// declares generated values: a generated value only lives encrypted.
	ErrGeneratedInPlainFile = errors.New("generated values are only allowed in secret files")
	// ErrValueFrozen is returned when a new secret file shares a generated
	// value with a secret file that already exists in the repository. The
	// existing value cannot be reproduced without decryption, so the caller
	// has to reference the existing Secret instead.
	ErrValueFrozen = errors.New("generated value exists in an encrypted file already in the repository")
)

var ErrInvalidGenerated = errors.New("invalid generated value declaration")