fix: Allow modify_ scripts to be encrypted

internal/chezmoi/attr.go

@@ -188,6 +188,10 @@ func parseFileAttr(sourceName, encryptedSuffix string) FileAttr {
 	case strings.HasPrefix(name, modifyPrefix):
 		sourceFileType = SourceFileTypeModify
 		name = mustTrimPrefix(name, modifyPrefix)
+		if strings.HasPrefix(name, encryptedPrefix) {
+			name = mustTrimPrefix(name, encryptedPrefix)
+			encrypted = true
+		}
 		if strings.HasPrefix(name, privatePrefix) {
 			name = mustTrimPrefix(name, privatePrefix)
 			private = true

internal/cmd/testdata/scripts/modifyencrypted.txt

@@ -0,0 +1,22 @@
+[windows] skip 'UNIX only'
+[!exec:age] skip 'age not found in $PATH'
+
+mkageconfig
+
+# test that chezmoi applies encrypted modify scripts
+mkdir $CHEZMOISOURCEDIR
+chezmoi encrypt --output=$CHEZMOISOURCEDIR${/}modify_encrypted_dot_modify.age golden/modify.sh
+grep '-----BEGIN AGE ENCRYPTED FILE-----' $CHEZMOISOURCEDIR/modify_encrypted_dot_modify.age
+chezmoi apply --force
+cmp $HOME/.modify golden/.modify-modified
+
+-- golden/.modify-modified --
+# contents of .modify
+# modified
+-- golden/modify.sh --
+#!/bin/sh
+
+cat
+echo "# modified"
+-- home/user/.modify --
+# contents of .modify