2025-09-23 - 2026-03-23
Overview
12 Pull requests merged by 2 users
Merged
#24 secure-enclave-unlocker
Merged
#22 chore: remove stale .cursorrules and coverage.out
Merged
#20 Add secret.Warn() calls for all silent anomalous conditions
Merged
#17 Skip unlocker directories with missing metadata instead of failing (closes #1)
Merged
#8 Fix getLongTermPrivateKey derivation index hardcoded to 0 (closes #3)
Merged
#16 Allow uppercase letters in secret names (closes #2)
Merged
#15 Validate secret name in GetSecretVersion to prevent path traversal (closes #13)
Merged
#18 Return error from GetDefaultStateDir when home directory unavailable (closes #14)
Merged
#11 Remove redundant longterm.age encryption in Init command (closes #6)
Merged
#9 Fix NumSecrets() always returning 0 (closes #4)
Merged
#12 Non-darwin KeychainUnlocker stub returns errors instead of panicking (closes #7)
Merged
#10 Zero plaintext after copying to memguard in DecryptWithIdentity (closes #5)
1 Pull request proposed by 1 user
Proposed
#21 ci: add Gitea Actions workflow for make check
11 Issues closed from 2 users
Closed
#23 Add branch protection to main branch
Closed
#19 Audit: missing user warnings for anomalous conditions
Closed
#1 missing metadata file for single unlocker breaks 'list' command
Closed
#3 Bug: getLongTermPrivateKey hardcodes derivation index 0 for mnemonic path
Closed
#2 secret name validation is wrong
Closed
#13 Bug: GetSecret/GetSecretVersion missing name validation allows path traversal
Closed
#14 Bug: GetDefaultStateDir ignores UserHomeDir error, may use empty path
Closed
#6 Bug: Init command writes longterm.age twice, second write overwrites correct encryption
Closed
#4 Bug: NumSecrets() always returns 0 due to incorrect directory traversal
Closed
#7 Bug: Non-darwin KeychainUnlocker stub panics instead of returning errors
Closed
#5 Security: DecryptWithIdentity leaks plaintext in unprotected memory
11 Issues created by 0 users
Opened
#1 missing metadata file for single unlocker breaks 'list' command
Opened
#2 secret name validation is wrong
Opened
#3 Bug: getLongTermPrivateKey hardcodes derivation index 0 for mnemonic path
Opened
#4 Bug: NumSecrets() always returns 0 due to incorrect directory traversal
Opened
#5 Security: DecryptWithIdentity leaks plaintext in unprotected memory
Opened
#6 Bug: Init command writes longterm.age twice, second write overwrites correct encryption
Opened
#7 Bug: Non-darwin KeychainUnlocker stub panics instead of returning errors
Opened
#13 Bug: GetSecret/GetSecretVersion missing name validation allows path traversal
Opened
#14 Bug: GetDefaultStateDir ignores UserHomeDir error, may use empty path
Opened
#19 Audit: missing user warnings for anomalous conditions
Opened
#23 Add branch protection to main branch