Hey Vishal, I think the approach here would be to use HashiCorp Vault. You can deploy it as a part of your infrastructure (be it either Kubernetes or Docker-Compose). But to be honest, I'm hoping that in future the SOPS team will make this work with GitHub/GitLab and BitBucket. This would in my opinion be the best option, since you are actually just worried about storing non-encrypted files on the VCS.