Block a user
README says secret add drops one trailing newline and import keeps it
A gpg failure is reported as only its exit status; gpg's reason on stderr is dropped
Include gpg's stderr in the error when gpg fails
Ask for the new passphrase in unlocker add when the variable is set (closes #154)
Rework:
TestUnlockerAddAsksForNewPassphraseadds a secret before the run, then checks the typed passphrase by running the built binary'ssecret getwithSB_UNLOCK_PASSPHRASEset to it.…
Lower-case the image URL's host and require a signature for a port (closes #246)
Remove expired negative cache rows in the eviction loop (closes #244)
Decision for finding 1: pixa has no installed base, so there are no piled-up rows from before this fix to plan for. The finding still holds without that: between two ticks the table collects the…
README says secret add drops one trailing newline and import keeps it
Review passed.
Model: opus-5-5
Unknown subcommands of vault, unlocker, version and generate fail
Logging out ends every login session (closes #256)
Stop vault creation when a vault's metadata cannot be read
Rework:
README.mdnow names only creating a vault (secret initandsecret vault create).- The commit message now names only
secret vault createandsecret init. - The PR body no…
Remove expired negative cache rows in the eviction loop (closes #244)
Review failed: needs-rework.
internal/imgcache/cache.go,CleanExpired: a singleDELETEremoves every expired row on pixa's only database connection. On the first start after upgrading a…
Do not prune when a backup misses an earlier mount point (closes #395)
Rework of the review above:
TestDeviceNumberFromStat(newinternal/snapshot/device_number_test.go) runsdeviceNumberFromStaton the real filesystem: a temp directory and a file in it…