secret

147 Commits 3 Branches 0 Tags

3 Commits

Author	SHA1	Message	Date
clawbot	dc225bd0b1	fix: add blank line before return for nlreturn linter	2026-02-19 23:44:38 -08:00
clawbot	6acd57d0ec	fix: suppress gosec G204 for validated GPG key ID inputs	2026-02-19 23:43:32 -08:00
clawbot	3fd30bb9e6	Validate secret name in GetSecretVersion to prevent path traversal Add isValidSecretName() check at the top of GetSecretVersion(), matching the existing validation in AddSecret(). Without this, crafted secret names containing path traversal sequences (e.g. '../../../etc/passwd') could be used to read files outside the vault directory. Add regression tests for both GetSecretVersion and GetSecret. Closes #13	2026-02-15 14:03:28 -08:00

Author

SHA1

Message

Date

clawbot

dc225bd0b1

fix: add blank line before return for nlreturn linter

2026-02-19 23:44:38 -08:00

clawbot

6acd57d0ec

fix: suppress gosec G204 for validated GPG key ID inputs

2026-02-19 23:43:32 -08:00

clawbot

3fd30bb9e6

Validate secret name in GetSecretVersion to prevent path traversal

Add isValidSecretName() check at the top of GetSecretVersion(), matching
the existing validation in AddSecret(). Without this, crafted secret names
containing path traversal sequences (e.g. '../../../etc/passwd') could be
used to read files outside the vault directory.

Add regression tests for both GetSecretVersion and GetSecret.

Closes #13

2026-02-15 14:03:28 -08:00