git diff for SOPS encrypted file

git-sops-diff

#!/bin/bash
set -eo pipefail
ref="$1"
fname="$2"
if [[ -z "$fname" || "$ref" == "-h" || "$ref" == "--help" ]] ; then
        echo "git diff for SOPS encrypted file"
        echo "use: git-sops-diff <commit> <path>"
        echo "compares working tree file to version in specified commit"
        exit 1
fi

ftype="${fname##*.}"
[[ "$fname" != */* ]] && fname="./${fname}"

tmpf1=`mktemp --tmpdir worktree.XXXXXX`
tmpf2=`mktemp --tmpdir commit.XXXXXX`
cleanup() { rm "$tmpf1" "$tmpf2" ; }
trap cleanup EXIT

sops -d "$fname" > "$tmpf1"

git show "${ref}:${fname}" | sops -d --input-type "$ftype" --output-type "$ftype" /dev/stdin > "$tmpf2"
diff -u "$tmpf2" "$tmpf1"