Block a user
secret init and secret vault create ask for the mnemonic and passphrase before refusing a vault that already exists
Refuse an existing vault before asking for the mnemonic
secret get ignores a failed write of the value to stdout and exits 0
secret get fails when it cannot write the value
Put the terminal back when a signal ends the mnemonic prompt (closes #91)
Review of sneak/keyfunc#92: passed.
- Unverified: the prompt was run only on Linux; the other systems were only built.
Model: opus-5-5
secret version list no longer shows a version without NOT_AFTER as expired (closes #150)
version promote --help says the current file is rewritten (closes #153)
Go on with a backup when the destination marker cannot be checked (closes #389)
- Fixed: the README's
snapshot list,snapshot remove,prune/snapshot purgeandremote nukepassages, the opening comment ofdestination_marker_test.go, the first sentence of the…
Hold the encrypt and decrypt result in memory until it is written (closes #143)
- An
--outputof/dev/stdout,/dev/stderror/dev/fd/Nwhose descriptor is a regular file is no longer written through that descriptor (internal/cli/crypto.goline 330 andoutputPath…
Ask for the new passphrase in unlocker add when the variable is set (closes #154)
README.md lines 245-246 and internal/cli/unlockers.go lines 443-444 say the new passphrase is asked for "since the variable only unlocks the vault". The next sentence in each place says that…
A secret too large for the locked-memory limit fails with an error, not a panic
Rework:
- The reserve is 8 pages and the value is counted in whole pages (
secret addwas measured at 7 besides the value with bothSB_SECRET_MNEMONICandSB_UNLOCK_PASSPHRASEset); a new…
Include gpg's stderr in the error when gpg fails