diff --git a/Earthfile b/Earthfile
index 40e0874891e8a05de953e2cadd398c5a7883370a..445dbc56aa766e3a2748bc6a7fce0413b5a2b28d 100644
--- a/Earthfile
+++ b/Earthfile
@@ -43,3 +43,7 @@ merge:
     RUN git push
     RUN git push origin --delete ${branch}
 
+rotate:
+    LOCALLY
+    RUN grep -Ril "sops:" ./**/*.yaml | xargs sops -r -i
+