Does sops set not support encrypted ini files?

[zenoweed]

xx... fetched → modified (no changes) → sops set failed for key 'ENV': Could not marshal tree: Error marshaling to ini: Error encoding section: Section values should always be TreeBranches

[felixfontein]

The INI store stores the global values under the DEFAULT section. You can see that when decrypting an INI file in another format (JSON or YAML). So you have to add a top-level DEFAULT to your index, like sops set foo.ini '["DEFAULT"]["xyz"]' '"asdf"'.