diff --git a/README.md b/README.md
index fca4a39..550e71e 100644
--- a/README.md
+++ b/README.md
@@ -61,6 +61,7 @@ Use a local override file to bind personal configuration files and secrets witho
 - **ansible** → configuration management and automation  
 - **rclone, rsync** → file synchronization and transfer utilities
 - **age**  
+- **sops**
 
 ### ☸️ Kubernetes Tooling
 
diff --git a/devops/Dockerfile b/devops/Dockerfile
index de36b14..cad47bb 100644
--- a/devops/Dockerfile
+++ b/devops/Dockerfile
@@ -96,4 +96,13 @@ RUN curl -L -o /tmp/buildkit.tar.gz \
 RUN curl -s https://fluxcd.io/install.sh | bash
 
 
+#----- SOPS
+ENV SOPS_VERSION=3.13.1
+
+RUN wget "https://github.com/getsops/sops/releases/download/v${SOPS_VERSION}/sops-v${SOPS_VERSION}.linux.amd64" -O /tmp/sops
+
+RUN cp /tmp/sops /usr/local/bin/sops
+RUN chmod +x /usr/local/bin/sops
+
+