Commit Graph

  • efa8647166 fix: use make build instead of inline go build in Dockerfile ci/make-check clawbot 2026-03-17 02:26:35 -07:00
  • 044ad92feb fix: add darwin build constraints to Objective-C source files clawbot 2026-03-14 17:54:37 -07:00
  • 386baaea70 fix: include .golangci.yml in Docker build context clawbot 2026-03-11 06:30:47 -07:00
  • 8edc629dd6 fix: add fmt-check to make check prerequisites clawbot 2026-03-10 18:14:16 -07:00
  • 59839309b3 fix: use digest-only FROM syntax (no tags) clawbot 2026-03-10 17:49:50 -07:00
  • 66a390d685 fix: pin all Docker base images by SHA256 digest clawbot 2026-03-10 17:25:37 -07:00
  • 7b84aa345f refactor: use official golangci-lint image for lint stage clawbot 2026-03-10 12:36:19 -07:00
  • a8ce1ff7c8 fix: use correct checkout SHA and simplify CI workflow clawbot 2026-03-10 12:29:39 -07:00
  • afa4f799da fix: resolve CI failures in docker build user 2026-03-10 12:25:48 -07:00
  • 9ada080821 ci: encapsulate checks in Dockerfile, simplify CI to docker build user 2026-02-28 10:32:36 -08:00
  • 25febccec1 security: pin all go install refs to commit SHAs clawbot 2026-02-20 03:10:44 -08:00
  • b68e1eb3d1 security: pin CI actions to commit SHAs user 2026-02-20 02:58:41 -08:00
  • cbca2e59c5 ci: add Gitea Actions workflow for make check user 2026-02-20 02:48:36 -08:00
  • a3d3fb3b69 secure-enclave-unlocker (#24) main sneak 2026-03-14 07:36:28 +01:00
  • 4dc26c9394 Merge pull request 'chore: remove stale .cursorrules and coverage.out' (#22) from chore/remove-stale-files into main Jeffrey Paul 2026-02-28 19:29:52 +01:00
  • 7546cb094f chore: remove stale .cursorrules and coverage.out user 2026-02-20 02:59:23 -08:00
  • 797d2678c8 Merge pull request 'Add secret.Warn() calls for all silent anomalous conditions' (#20) from clawbot/secret:audit/add-warnings into main Jeffrey Paul 2026-02-20 09:22:29 +01:00
  • 78015afb35 Add secret.Warn() calls for all silent anomalous conditions user 2026-02-20 00:03:49 -08:00
  • 1c330c697f Merge pull request 'Skip unlocker directories with missing metadata instead of failing (closes #1)' (#17) from clawbot/secret:fix/issue-1 into main Jeffrey Paul 2026-02-20 08:59:04 +01:00
  • d18e286377 Merge branch 'main' into fix/issue-1 Jeffrey Paul 2026-02-20 08:58:43 +01:00
  • f49fde3a06 Merge pull request 'Fix getLongTermPrivateKey derivation index hardcoded to 0 (closes #3)' (#8) from clawbot/secret:fix/issue-3 into main Jeffrey Paul 2026-02-20 08:58:21 +01:00
  • 206651f89a Merge branch 'main' into fix/issue-3 Jeffrey Paul 2026-02-20 08:58:10 +01:00
  • c0f221b1ca Change missing metadata log from Debug to Warn for visibility without --verbose user 2026-02-19 23:57:39 -08:00
  • 09be20a044 Merge pull request 'Allow uppercase letters in secret names (closes #2)' (#16) from clawbot/secret:fix/issue-2 into main Jeffrey Paul 2026-02-20 08:57:19 +01:00
  • 2e1ba7d2e0 Merge branch 'main' into fix/issue-2 Jeffrey Paul 2026-02-20 08:57:03 +01:00
  • 1a23016df1 Merge pull request 'Validate secret name in GetSecretVersion to prevent path traversal (closes #13)' (#15) from clawbot/secret:fix/issue-13 into main Jeffrey Paul 2026-02-20 08:56:51 +01:00
  • ebe3c17618 Merge branch 'main' into fix/issue-13 Jeffrey Paul 2026-02-20 08:56:36 +01:00
  • 1a96360f6a Skip unlocker directories with missing metadata instead of failing clawbot 2026-02-15 14:04:37 -08:00
  • 4f5d2126d6 Merge pull request 'Return error from GetDefaultStateDir when home directory unavailable (closes #14)' (#18) from clawbot/secret:fix/issue-14 into main Jeffrey Paul 2026-02-20 08:54:22 +01:00
  • 6be4601763 refactor: return errors from NewCLIInstance instead of panicking clawbot 2026-02-19 23:53:29 -08:00
  • 36ece2fca7 docs: add Go coding policies to AGENTS.md per review request user 2026-02-19 23:52:59 -08:00
  • dc225bd0b1 fix: add blank line before return for nlreturn linter clawbot 2026-02-19 23:44:38 -08:00
  • 6acd57d0ec fix: suppress gosec G204 for validated GPG key ID inputs clawbot 2026-02-19 23:43:32 -08:00
  • 596027f210 fix: suppress gosec G204 for validated GPG key ID inputs clawbot 2026-02-19 23:43:13 -08:00
  • 0aa9a52497 test: add test for getLongTermPrivateKey derivation index clawbot 2026-02-08 17:21:31 -08:00
  • 09ec79c57e fix: use vault derivation index in getLongTermPrivateKey instead of hardcoded 0 clawbot 2026-02-08 12:03:06 -08:00
  • e8339f4d12 fix: update integration test to allow uppercase secret names clawbot 2026-02-19 23:42:39 -08:00
  • 4f984cd9c6 fix: suppress gosec G204 for validated GPG key ID inputs clawbot 2026-02-19 23:41:43 -08:00
  • d1caf0a208 fix: suppress gosec G204 for validated GPG key ID inputs clawbot 2026-02-19 23:39:45 -08:00
  • 8eb25b98fd fix: block .. path components in secret names and validate in GetSecretObject user 2026-02-15 14:17:33 -08:00
  • 6211b8e768 Return error from GetDefaultStateDir when home directory unavailable clawbot 2026-02-15 14:05:15 -08:00
  • 0307f23024 Allow uppercase letters in secret names (closes #2) user 2026-02-15 14:03:50 -08:00
  • 3fd30bb9e6 Validate secret name in GetSecretVersion to prevent path traversal clawbot 2026-02-15 14:03:28 -08:00
  • 6ff00c696a Merge pull request 'Remove redundant longterm.age encryption in Init command (closes #6)' (#11) from clawbot/secret:fix/issue-6 into main Jeffrey Paul 2026-02-09 02:39:55 +01:00
  • c6551e4901 Merge branch 'main' into fix/issue-6 Jeffrey Paul 2026-02-09 02:39:41 +01:00
  • b06d7fa3f4 Merge pull request 'Fix NumSecrets() always returning 0 (closes #4)' (#9) from clawbot/secret:fix/issue-4 into main Jeffrey Paul 2026-02-09 02:39:30 +01:00
  • 16d5b237d2 Merge branch 'main' into fix/issue-4 Jeffrey Paul 2026-02-09 02:26:20 +01:00
  • 660de5716a Merge pull request 'Non-darwin KeychainUnlocker stub returns errors instead of panicking (closes #7)' (#12) from clawbot/secret:fix/issue-7 into main Jeffrey Paul 2026-02-09 02:20:14 +01:00
  • 51fb2805fd Merge branch 'main' into fix/issue-7 Jeffrey Paul 2026-02-09 02:19:56 +01:00
  • 6ffb24b544 Merge pull request 'Zero plaintext after copying to memguard in DecryptWithIdentity (closes #5)' (#10) from clawbot/secret:fix/issue-5 into main Jeffrey Paul 2026-02-09 02:18:06 +01:00
  • 4419ef7730 fix: non-darwin KeychainUnlocker stub returns errors instead of panicking clawbot 2026-02-08 12:05:38 -08:00
  • 991b1a5a0b fix: remove redundant longterm.age encryption in Init command clawbot 2026-02-08 12:05:09 -08:00
  • fd77a047f9 security: zero plaintext after copying to memguard in DecryptWithIdentity clawbot 2026-02-08 12:04:38 -08:00
  • 341428d9ca fix: NumSecrets() now correctly counts secrets by checking for current file clawbot 2026-02-08 12:04:15 -08:00
  • 128c53a11d Add cross-vault move command for secrets sneak 2025-12-23 15:24:13 +07:00
  • 7264026d66 Fix unlocker rm to succeed when keychain item is missing sneak 2025-12-23 14:14:14 +07:00
  • 20690ba652 Switch from relative paths to bare names in pointer files sneak 2025-12-23 13:43:10 +07:00
  • 949a5aee61 Replace symlinks with plain files containing relative paths sneak 2025-12-23 11:53:28 +07:00
  • 18fb79e971 Fix 'secret get' to output to stdout instead of stderr sneak 2025-07-29 20:01:10 +02:00
  • b301a414cb README updates sneak 2025-07-27 17:38:46 +02:00
  • 92c41bdb0c Fix error handling in AddSecret to clean up on failure sneak 2025-07-26 22:03:31 +02:00
  • 75c3d22b62 Fix vault creation to require mnemonic and set up initial unlocker sneak 2025-07-26 21:58:57 +02:00
  • a6f24e9581 Fix --keyid flag scope and implement secret move command sneak 2025-07-26 01:26:27 +02:00
  • a73a409fe4 Refactor unlockers command structure and add quiet flag to list command sneak 2025-07-22 16:04:44 +02:00
  • 70d19d09d0 latest sneak 2025-07-22 13:35:19 +02:00
  • 40ea47b2a1 Add missing changes from feature branch sneak 2025-07-22 12:51:02 +02:00
  • 7ed3e287ea Merge branch 'add-list-remove-commands' sneak 2025-07-22 12:47:20 +02:00
  • 8e3530a510 Fix use-after-free crash in readSecurePassphrase sneak 2025-07-22 12:46:16 +02:00
  • e5d7407c79 Fix mnemonic input to not echo to screen sneak 2025-07-22 12:39:32 +02:00
  • 377b51f2db Add Docker support for building and running the CLI tool sneak 2025-07-21 22:13:19 +02:00
  • a09fa89f30 Fix cross-platform build issues and security vulnerabilities sneak 2025-07-21 22:05:23 +02:00
  • 7af1e6efa8 Improve PGP unlocker ergonomics sneak 2025-07-21 18:57:58 +02:00
  • 09b3a1fcdc Remove internal/macse package and fix all linter issues sneak 2025-07-21 17:48:47 +02:00
  • 816f53f819 Replace shell-based keychain implementation with keybase/go-keychain library sneak 2025-07-21 15:58:41 +02:00
  • bba1fb21e6 docs sneak 2025-07-15 19:01:29 +02:00
  • d4f557631b prototype secure enclave interface sneak 2025-07-15 09:37:02 +02:00
  • e53161188c Fix remaining memory security issues sneak 2025-07-15 09:08:51 +02:00
  • ff17b9b107 Update TODO.md - DecryptWithPassphrase already fixed sneak 2025-07-15 09:04:59 +02:00
  • 63cc06b93c Fix DecryptWithIdentity to return LockedBuffer sneak 2025-07-15 09:04:34 +02:00
  • 8ec3fc877d Fix GetValue methods to return LockedBuffer internally sneak 2025-07-15 08:59:23 +02:00
  • 819902f385 Fix gpgEncryptDefault to accept LockedBuffer for data parameter sneak 2025-07-15 08:46:33 +02:00
  • 292564c6e7 Fix storeInKeychain to accept LockedBuffer for data parameter sneak 2025-07-15 08:44:09 +02:00
  • eef2332823 Fix EncryptWithPassphrase to accept LockedBuffer for data parameter sneak 2025-07-15 08:42:46 +02:00
  • e82d428b05 Remove deprecated Secret.Save function sneak 2025-07-15 08:40:35 +02:00
  • 9cbe055791 fmt sneak 2025-07-15 08:33:16 +02:00
  • 7596049828 uses protected memory buffers now for all secrets in ram fix-memory-security sneak 2025-07-15 08:32:33 +02:00
  • d3ca006886 Merge branch 'main' into fix-memory-security sneak 2025-07-15 07:36:13 +02:00
  • f91281e991 Merge branch 'fix-test-json-fields' sneak 2025-07-15 07:35:58 +02:00
  • 7c5e78db17 fix: update JSON fields from snake_case to camelCase and make tests quiet by default sneak 2025-07-15 07:35:48 +02:00
  • 8e374b3d24 add test binaries to gitignore sneak 2025-07-15 07:24:15 +02:00
  • c9774e89e0 WIP: refactor to use memguard for secure memory handling sneak 2025-07-15 07:22:41 +02:00
  • f9938135c6 fix: resolve all remaining linter issues (staticcheck, tagliatelle, lll) sneak 2025-07-15 06:33:25 +02:00
  • 386a27c0b6 fix: resolve all revive linter issues sneak 2025-07-15 06:06:48 +02:00
  • 080a3dc253 fix: resolve all nlreturn linter errors sneak 2025-07-15 06:00:32 +02:00
  • 811ddee3b7 fix: resolve all nestif linter errors sneak 2025-07-15 05:47:16 +02:00
  • 4e242c3491 go 1.24 sneak 2025-07-09 16:09:59 -07:00
  • 54fce0f187 fix: resolve mnd and nestif linter errors sneak 2025-07-09 12:54:59 -07:00
  • 93a32217e0 fix: resolve mnd (magic number) linter errors in agehd and bip85 packages sneak 2025-07-09 12:52:46 -07:00
  • 95ba80f618 fix: resolve gochecknoglobals, gosec, lll, and mnd linter errors sneak 2025-07-09 12:49:59 -07:00
  • d710323bd0 fix: add nolint comments for necessary global variables in internal/secret sneak 2025-07-09 12:47:51 -07:00