add specific status code for sops errors

cmd/sops/main.go

@@ -1006,6 +1006,8 @@ func toExitError(err error) error {
  return cliErr
  } else if execErr, ok := err.(*osExec.ExitError); ok && execErr != nil {
  return cli.NewExitError(err, execErr.ExitCode())
+ } else if sopsErr, ok := err.(*sops.SopsError); ok && sopsErr != nil {
+ return cli.NewExitError(err, sopsErr.ExitCode())
  } else if err != nil {
  return cli.NewExitError(err, codes.ErrorGeneric)
  }

sops.go

@@ -58,17 +58,24 @@ import (
 // DefaultUnencryptedSuffix is the default suffix a TreeItem key has to end with for sops to leave its Value unencrypted
 const DefaultUnencryptedSuffix = "_unencrypted"
 
-type sopsError string
+type SopsError struct {
+ exitCode int
+ message string
+}
+
+func (e SopsError) ExitCode() int {
+ return e.exitCode
+}
 
-func (e sopsError) Error() string {
- return string(e)
+func (e SopsError) Error() string {
+ return e.message
 }
 
 // MacMismatch occurs when the computed MAC does not match the expected ones
-const MacMismatch = sopsError("MAC mismatch")
+var MacMismatch = &SopsError{10, "MAC mismatch"}
 
 // MetadataNotFound occurs when the input file is malformed and doesn't have sops metadata in it
-const MetadataNotFound = sopsError("sops metadata not found")
+var MetadataNotFound = &SopsError{11, "sops metadata not found"}
 
 var log *logrus.Logger