Commit Graph

Select branches

Hide Pull Requests

audit/add-warnings

fix-memory-security

fix/issue-1

fix/issue-13

fix/issue-14

fix/issue-2

fix/issue-3

fix/issue-4

fix/issue-5

fix/issue-6

main

Mono Color

• 78015afb35 Add secret.Warn() calls for all silent anomalous conditions audit/add-warnings user 2026-02-20 00:03:49 -0800
• 1c330c697f Merge pull request 'Skip unlocker directories with missing metadata instead of failing (closes #1)' (#17) from clawbot/secret:fix/issue-1 into main Jeffrey Paul 2026-02-20 08:59:04 +0100
• d18e286377 Merge branch 'main' into fix/issue-1 fix/issue-1 Jeffrey Paul 2026-02-20 08:58:43 +0100
• f49fde3a06 Merge pull request 'Fix getLongTermPrivateKey derivation index hardcoded to 0 (closes #3)' (#8) from clawbot/secret:fix/issue-3 into main Jeffrey Paul 2026-02-20 08:58:21 +0100
• 206651f89a Merge branch 'main' into fix/issue-3 fix/issue-3 Jeffrey Paul 2026-02-20 08:58:10 +0100
• c0f221b1ca Change missing metadata log from Debug to Warn for visibility without --verbose user 2026-02-19 23:57:39 -0800
• 09be20a044 Merge pull request 'Allow uppercase letters in secret names (closes #2)' (#16) from clawbot/secret:fix/issue-2 into main Jeffrey Paul 2026-02-20 08:57:19 +0100
• 2e1ba7d2e0 Merge branch 'main' into fix/issue-2 fix/issue-2 Jeffrey Paul 2026-02-20 08:57:03 +0100
• 1a23016df1 Merge pull request 'Validate secret name in GetSecretVersion to prevent path traversal (closes #13)' (#15) from clawbot/secret:fix/issue-13 into main Jeffrey Paul 2026-02-20 08:56:51 +0100
• ebe3c17618 Merge branch 'main' into fix/issue-13 fix/issue-13 Jeffrey Paul 2026-02-20 08:56:36 +0100
• 1a96360f6a Skip unlocker directories with missing metadata instead of failing clawbot 2026-02-15 14:04:37 -0800
• 4f5d2126d6 Merge pull request 'Return error from GetDefaultStateDir when home directory unavailable (closes #14)' (#18) from clawbot/secret:fix/issue-14 into main Jeffrey Paul 2026-02-20 08:54:22 +0100
• 6be4601763 refactor: return errors from NewCLIInstance instead of panicking fix/issue-14 clawbot 2026-02-19 23:53:29 -0800
• 36ece2fca7 docs: add Go coding policies to AGENTS.md per review request user 2026-02-19 23:52:59 -0800
• dc225bd0b1 fix: add blank line before return for nlreturn linter clawbot 2026-02-19 23:44:38 -0800
• 6acd57d0ec fix: suppress gosec G204 for validated GPG key ID inputs clawbot 2026-02-19 23:43:32 -0800
• 596027f210 fix: suppress gosec G204 for validated GPG key ID inputs clawbot 2026-02-19 23:43:13 -0800
• 0aa9a52497 test: add test for getLongTermPrivateKey derivation index clawbot 2026-02-08 17:21:31 -0800
• 09ec79c57e fix: use vault derivation index in getLongTermPrivateKey instead of hardcoded 0 clawbot 2026-02-08 12:03:06 -0800
• e8339f4d12 fix: update integration test to allow uppercase secret names clawbot 2026-02-19 23:42:39 -0800
• 4f984cd9c6 fix: suppress gosec G204 for validated GPG key ID inputs clawbot 2026-02-19 23:41:43 -0800
• d1caf0a208 fix: suppress gosec G204 for validated GPG key ID inputs clawbot 2026-02-19 23:39:45 -0800
• 8eb25b98fd fix: block .. path components in secret names and validate in GetSecretObject user 2026-02-15 14:17:33 -0800
• 6211b8e768 Return error from GetDefaultStateDir when home directory unavailable clawbot 2026-02-15 14:05:15 -0800
• 0307f23024 Allow uppercase letters in secret names (closes #2) user 2026-02-15 14:03:50 -0800
• 3fd30bb9e6 Validate secret name in GetSecretVersion to prevent path traversal clawbot 2026-02-15 14:03:28 -0800
• 6ff00c696a Merge pull request 'Remove redundant longterm.age encryption in Init command (closes #6)' (#11) from clawbot/secret:fix/issue-6 into main Jeffrey Paul 2026-02-09 02:39:55 +0100
• c6551e4901 Merge branch 'main' into fix/issue-6 fix/issue-6 Jeffrey Paul 2026-02-09 02:39:41 +0100
• b06d7fa3f4 Merge pull request 'Fix NumSecrets() always returning 0 (closes #4)' (#9) from clawbot/secret:fix/issue-4 into main Jeffrey Paul 2026-02-09 02:39:30 +0100
• 16d5b237d2 Merge branch 'main' into fix/issue-4 fix/issue-4 Jeffrey Paul 2026-02-09 02:26:20 +0100
• 660de5716a Merge pull request 'Non-darwin KeychainUnlocker stub returns errors instead of panicking (closes #7)' (#12) from clawbot/secret:fix/issue-7 into main Jeffrey Paul 2026-02-09 02:20:14 +0100
• 51fb2805fd Merge branch 'main' into fix/issue-7 Jeffrey Paul 2026-02-09 02:19:56 +0100
• 6ffb24b544 Merge pull request 'Zero plaintext after copying to memguard in DecryptWithIdentity (closes #5)' (#10) from clawbot/secret:fix/issue-5 into main Jeffrey Paul 2026-02-09 02:18:06 +0100
• 4419ef7730 fix: non-darwin KeychainUnlocker stub returns errors instead of panicking clawbot 2026-02-08 12:05:38 -0800
• 991b1a5a0b fix: remove redundant longterm.age encryption in Init command clawbot 2026-02-08 12:05:09 -0800
• fd77a047f9 security: zero plaintext after copying to memguard in DecryptWithIdentity fix/issue-5 clawbot 2026-02-08 12:04:38 -0800
• 341428d9ca fix: NumSecrets() now correctly counts secrets by checking for current file clawbot 2026-02-08 12:04:15 -0800
• 128c53a11d Add cross-vault move command for secrets main sneak 2025-12-23 15:24:13 +0700
• 7264026d66 Fix unlocker rm to succeed when keychain item is missing sneak 2025-12-23 14:14:14 +0700
• 20690ba652 Switch from relative paths to bare names in pointer files sneak 2025-12-23 13:43:10 +0700
• 949a5aee61 Replace symlinks with plain files containing relative paths sneak 2025-12-23 11:53:28 +0700
• 18fb79e971 Fix 'secret get' to output to stdout instead of stderr sneak 2025-07-29 20:01:10 +0200
• b301a414cb README updates sneak 2025-07-27 17:38:46 +0200
• 92c41bdb0c Fix error handling in AddSecret to clean up on failure sneak 2025-07-26 22:03:31 +0200
• 75c3d22b62 Fix vault creation to require mnemonic and set up initial unlocker sneak 2025-07-26 21:58:57 +0200
• a6f24e9581 Fix --keyid flag scope and implement secret move command sneak 2025-07-26 01:26:27 +0200
• a73a409fe4 Refactor unlockers command structure and add quiet flag to list command sneak 2025-07-22 16:04:44 +0200
• 70d19d09d0 latest sneak 2025-07-22 13:35:19 +0200
• 40ea47b2a1 Add missing changes from feature branch sneak 2025-07-22 12:51:02 +0200
• 7ed3e287ea Merge branch 'add-list-remove-commands' sneak 2025-07-22 12:47:20 +0200
• 8e3530a510 Fix use-after-free crash in readSecurePassphrase sneak 2025-07-22 12:46:16 +0200
• e5d7407c79 Fix mnemonic input to not echo to screen sneak 2025-07-22 12:39:32 +0200
• 377b51f2db Add Docker support for building and running the CLI tool sneak 2025-07-21 22:13:19 +0200
• a09fa89f30 Fix cross-platform build issues and security vulnerabilities sneak 2025-07-21 22:05:23 +0200
• 7af1e6efa8 Improve PGP unlocker ergonomics sneak 2025-07-21 18:57:58 +0200
• 09b3a1fcdc Remove internal/macse package and fix all linter issues sneak 2025-07-21 17:48:47 +0200
• 816f53f819 Replace shell-based keychain implementation with keybase/go-keychain library sneak 2025-07-21 15:58:41 +0200
• bba1fb21e6 docs sneak 2025-07-15 19:01:29 +0200
• d4f557631b prototype secure enclave interface sneak 2025-07-15 09:37:02 +0200
• e53161188c Fix remaining memory security issues sneak 2025-07-15 09:08:51 +0200
• ff17b9b107 Update TODO.md - DecryptWithPassphrase already fixed sneak 2025-07-15 09:04:59 +0200
• 63cc06b93c Fix DecryptWithIdentity to return LockedBuffer sneak 2025-07-15 09:04:34 +0200
• 8ec3fc877d Fix GetValue methods to return LockedBuffer internally sneak 2025-07-15 08:59:23 +0200
• 819902f385 Fix gpgEncryptDefault to accept LockedBuffer for data parameter sneak 2025-07-15 08:46:33 +0200
• 292564c6e7 Fix storeInKeychain to accept LockedBuffer for data parameter sneak 2025-07-15 08:44:09 +0200
• eef2332823 Fix EncryptWithPassphrase to accept LockedBuffer for data parameter sneak 2025-07-15 08:42:46 +0200
• e82d428b05 Remove deprecated Secret.Save function sneak 2025-07-15 08:40:35 +0200
• 9cbe055791 fmt sneak 2025-07-15 08:33:16 +0200
• 7596049828 uses protected memory buffers now for all secrets in ram fix-memory-security sneak 2025-07-15 08:32:33 +0200
• d3ca006886 Merge branch 'main' into fix-memory-security sneak 2025-07-15 07:36:13 +0200
• f91281e991 Merge branch 'fix-test-json-fields' sneak 2025-07-15 07:35:58 +0200
• 7c5e78db17 fix: update JSON fields from snake_case to camelCase and make tests quiet by default sneak 2025-07-15 07:35:48 +0200
• 8e374b3d24 add test binaries to gitignore sneak 2025-07-15 07:24:15 +0200
• c9774e89e0 WIP: refactor to use memguard for secure memory handling sneak 2025-07-15 07:22:41 +0200
• f9938135c6 fix: resolve all remaining linter issues (staticcheck, tagliatelle, lll) sneak 2025-07-15 06:33:25 +0200
• 386a27c0b6 fix: resolve all revive linter issues sneak 2025-07-15 06:06:48 +0200
• 080a3dc253 fix: resolve all nlreturn linter errors sneak 2025-07-15 06:00:32 +0200
• 811ddee3b7 fix: resolve all nestif linter errors sneak 2025-07-15 05:47:16 +0200
• 4e242c3491 go 1.24 sneak 2025-07-09 16:09:59 -0700
• 54fce0f187 fix: resolve mnd and nestif linter errors sneak 2025-07-09 12:54:59 -0700
• 93a32217e0 fix: resolve mnd (magic number) linter errors in agehd and bip85 packages sneak 2025-07-09 12:52:46 -0700
• 95ba80f618 fix: resolve gochecknoglobals, gosec, lll, and mnd linter errors sneak 2025-07-09 12:49:59 -0700
• d710323bd0 fix: add nolint comments for necessary global variables in internal/secret sneak 2025-07-09 12:47:51 -0700
• 38b450cbcf fix: resolve mnd and nestif linter errors sneak 2025-07-09 07:05:07 -0700
• 6fe49344e2 fix: resolve errcheck, gosec, and mnd linter errors sneak 2025-07-09 06:59:01 -0700
• 6e01ae6002 chore: exclude errcheck linter from test files sneak 2025-07-09 06:18:52 -0700
• 11e43542cf fix: handle error returns from os.Unsetenv and file.Close (errcheck) sneak 2025-07-09 06:16:13 -0700
• 2256a37b72 Update golangci-lint configuration to v2.2.1 format sneak 2025-07-09 06:11:48 -0700
• 533133486c fix: remove unnecessary type conversions (unconvert) sneak 2025-06-20 12:52:19 -0700
• eb19fa4b97 fix: replace unused parameters with underscores (revive) sneak 2025-06-20 12:50:16 -0700
• 5ed850196b fix: convert ALL_CAPS constants to CamelCase (revive) sneak 2025-06-20 12:49:01 -0700
• be1f323a09 fix: remove unnecessary zero value initialization (revive) sneak 2025-06-20 12:47:58 -0700
• bdcddadf90 fix: resolve exported type stuttering issues (revive) sneak 2025-06-20 12:47:06 -0700
• 4062242063 fix: break long error messages to meet line length limits sneak 2025-06-20 09:51:26 -0700
• abcc7b6c3a fix: resolve gosec integer overflow and unconvert issues sneak 2025-06-20 09:50:00 -0700
• 9e35bf21a3 fix: more nlreturn and testifylint issues sneak 2025-06-20 09:40:17 -0700
• 2a1e0337fd fix: add blank lines before return statements (nlreturn) sneak 2025-06-20 09:37:56 -0700
• dcc15008cd add instructions to keep going sneak 2025-06-20 09:37:01 -0700
• dd2e95f8af fix: replace magic file permissions and add crypto constant comments sneak 2025-06-20 09:23:50 -0700
• c450e1c13d fix: replace remaining os.Setenv with t.Setenv in tests sneak 2025-06-20 09:22:01 -0700