secret

180 Commits 8 Branches 0 Tags

3 Commits

Author	SHA1	Message	Date
clawbot	c43eb26127	Keep unlocker list working when unlocker metadata is corrupt (closes #42 ) check / check (push) Successful in 1m12s Details PGPUnlocker.GetID() panicked when its metadata could not be read or parsed, which took down `secret unlocker list` for every unlocker. It now warns with the unlocker's directory and returns `pgp-unknown`; metadata with an empty GPG key ID counts as corrupt too. ListUnlockers now skips, with a warning, an unlocker whose metadata file is unreadable or not JSON, as it already did for a missing one. This is the first half of the issue only. Passing the mnemonic in memory moved to #60. Model: opus-5-5	2026-10-03 12:17:04 +00:00
clawbot	d52b4f1240	Let a plain docker build pass and stamp the git version (closes #57 ) check / check (push) Successful in 1m1s Details The size tests skip a case whose secret needs more locked memory than the process can lock, found by locking a buffer of that size: memguard panics otherwise, and a plain `docker build .` runs under an 8 MiB RLIMIT_MEMLOCK. script/cibuild, or any process allowed to lock past the limit, runs every case. The build stage stamps the VERSION build argument, else `git describe --tags --always`, and fails when .git is present but yields no version. `make build` stamps `git describe` too instead of the fixed 0.1.0. .dockerignore keeps .git/config out; script/docker is now the canonical copy. Model: opus-5-5 Co-authored-by: clawbot <sneak+clawbot@sneak.cloud>	2026-10-02 14:16:02 +02:00
clawbot user clawbot	b090b3f86b	ci: add Gitea Actions workflow for make check (#21 ) check / check (push) Successful in 26s Details Adds CI workflow that runs `make check` on push/PR to main. Co-authored-by: user <user@Mac.lan guest wan> Co-authored-by: clawbot <clawbot@eeqj.de> Reviewed-on: #21 Co-authored-by: clawbot <sneak+clawbot@sneak.cloud> Co-committed-by: clawbot <sneak+clawbot@sneak.cloud>	2026-03-30 21:34:49 +02:00

Author

SHA1

Message

Date

clawbot

c43eb26127

Keep unlocker list working when unlocker metadata is corrupt (closes #42 )

check / check (push) Successful in 1m12s

Details

PGPUnlocker.GetID() panicked when its metadata could not be read or
parsed, which took down `secret unlocker list` for every unlocker. It
now warns with the unlocker's directory and returns `pgp-unknown`;
metadata with an empty GPG key ID counts as corrupt too.
ListUnlockers now skips, with a warning, an unlocker whose metadata
file is unreadable or not JSON, as it already did for a missing one.

This is the first half of the issue only. Passing the mnemonic in
memory moved to #60.

Model: opus-5-5

2026-10-03 12:17:04 +00:00

clawbot

d52b4f1240

Let a plain docker build pass and stamp the git version (closes #57 )

check / check (push) Successful in 1m1s

Details

The size tests skip a case whose secret needs more locked memory than
the process can lock, found by locking a buffer of that size: memguard
panics otherwise, and a plain `docker build .` runs under an 8 MiB
RLIMIT_MEMLOCK. script/cibuild, or any process allowed to lock past the
limit, runs every case.

The build stage stamps the VERSION build argument, else
`git describe --tags --always`, and fails when .git is present but
yields no version. `make build` stamps `git describe` too instead of
the fixed 0.1.0. .dockerignore keeps .git/config out; script/docker is
now the canonical copy.

Model: opus-5-5
Co-authored-by: clawbot <sneak+clawbot@sneak.cloud>

2026-10-02 14:16:02 +02:00

b090b3f86b

ci: add Gitea Actions workflow for make check (#21 )

check / check (push) Successful in 26s

Details

Adds CI workflow that runs `make check` on push/PR to main.

Co-authored-by: user <user@Mac.lan guest wan>
Co-authored-by: clawbot <clawbot@eeqj.de>
Reviewed-on: #21
Co-authored-by: clawbot <sneak+clawbot@sneak.cloud>
Co-committed-by: clawbot <sneak+clawbot@sneak.cloud>

2026-03-30 21:34:49 +02:00