I noticed that helmfile doesnt error if there is a problem with helm-secrets decryption.

By mistake, new CI didnt have the plugin installed at all but helmfile still showed

Decrypting secret /...../secrets.yaml
Decrypting /...../secrets.yaml

Still, if plugin is installed, but decryption fails for a reason (e.g. not allowed to decrypt), helmfile will still show the same output.

Took me a while to figure out why it showed secrets in diff/sync locally but not in CI.

It would be great if helmfile would error or at least warn in such cases !