Function IsSOPSEncrypted

internal/config/files.go:225–241

IsSOPSEncrypted checks if a file is SOPS-encrypted.

(path string, data []byte)

// IsSOPSEncrypted checks if a file is SOPS-encrypted.
func IsSOPSEncrypted(path string, data []byte) bool {
	// Check for SOPS header patterns in the entire content
	content := string(data)
	// Check for "sops:" YAML key (most common) or "\"sops\":" JSON key
	hasSopsKey := contains(content, "sops:") || contains(content, "\"sops\":")
	// Check for ENC[ marker which is specific to SOPS/Age
	hasEnc := contains(content, "ENC[")

	if DebugEnabled {
		// Use global logger for debug output to avoid UI corruption
		if globalLogger := logger.GetGlobalLogger(); globalLogger != nil {
			globalLogger.Debug("SOPS detection for %s: hasSopsKey=%v, hasEnc=%v", path, hasSopsKey, hasEnc)
		}
	}

	return hasSopsKey || hasEnc
}

// contains checks if a string contains a substring (case-insensitive).
func contains(s, substr string) bool {