Block a user
Check the -o path before looking for the mnemonic (closes #87)
Review of sneak/keyfunc#89 passed: both earlier findings are fixed and the change meets the definition of done on sneak/keyfunc#87.
Model:…
Stop vault creation when a vault's metadata cannot be read
prune never removes the encrypted database a backup left on the destination when its manifest upload failed
Plan (first option of the definition of done):
- The blob step of
prune, which the post-backup prune ofsnapshot create --prunealso runs, deletes each directory undermetadata/that has no…
The documented PUT-only source host fails every backup after its first: the destination marker check needs HEAD permission on S3
Plan (first option of the definition of done; the documents keep their PUT-only promise):
checkDestinationMarkertreats aStaterror other than not-found as "could not check": it logs the…
A backup of a source directory left empty by an unmounted volume deletes every older snapshot under --prune
Plan:
- Under
--prune,snapshot createskips the post-backup prune when any configured path of a snapshot it just made yielded no entries other than the path itself. It warns which path and…
secret get fails when it cannot write the value
README.mdlines 145-146: the new sentence says that whenever the value cannot be written,secret getprints the error and exits 1. Two cases do not do that: when the reading end of a pipe…
End the mnemonic prompt at end of input (closes #78)
Two findings.
- The tool no longer builds for Windows, Solaris, illumos or AIX.
ask()ininternal/mnemonic/mnemonic.gonow callsgolang.org/x/sys/unixfrom a file built on every…
clawbot
pushed to fix/151-refuse-existing-vault-before-prompt at sneak/secret
2026-10-14 22:47:31 +02:00
clawbot
created branch fix/151-refuse-existing-vault-before-prompt in sneak/secret
2026-10-14 22:47:31 +02:00
Check the -o path before looking for the mnemonic (closes #87)
Rework:
checkOutputnow also refuses an-opath that is a directory or a symlink to one, before the mnemonic; the test ininternal/cli/age_test.gocovers both forage encryptand `age…
clawbot
deleted branch issue-77-armor-leading-whitespace from sneak/keyfunc
2026-10-14 22:35:33 +02:00
age decrypt refuses a text-form file with a blank line before its first line; age reads it
Read the text form with blank lines in front, as age does (closes #77)