Added ignore MAC option

[ownercoder]

Content may be changed, without regenerating MAC. SOPS have option --ignore-mac before opening, it's allow correctly open changed config/secret

[td-macompta]

I Hope it will be merged.

[2fst4u]

I've just started getting a MAC mismatch error and now I can't decrypt my files in vscode. Is this what's needed for it to work?

[td-macompta]

I've just started getting a MAC mismatch error and now I can't decrypt my files in vscode. Is this what's needed for it to work?

Now with the latest version of SOPS (3.9.0), you can use the "mac only encrypted" option during encryption. With this option, it becomes possible to modify the unencrypted values without encountering "mac" verification issues.

You can specify the option in your .sops file (mac_only_encrypted: true) or as a flag (--mac-only-encrypted) during encryption.

To resolve your current situation, however, you need to decrypt with the command line using the --ignore-mac option and then re-encrypt.