mirror of
https://github.com/getsops/sops.git
synced 2026-02-05 12:45:21 +01:00
The original validation logic used AND (&&) operators which only detected conflicts when ALL THREE destination types were specified. This meant invalid two-way conflicts like s3_bucket + gcs_bucket would silently pass validation. Fixed by implementing proper counting-based validation that rejects any configuration with more than one destination type specified. Added comprehensive test coverage for all conflict scenarios: - S3 + GCS conflicts - S3 + Vault conflicts - GCS + Vault conflicts - All three destinations conflicts - Positive tests for valid single destinations Fixes a critical configuration validation bug that could lead to unexpected publish behavior with misconfigured .sops.yaml files. Signed-off-by: bruce-szalwinski-he <bruce.szalwinski@hotelengine.com>