1.0.0

New Issue

Blockers for tagging v1.0.0. Security-critical correctness and memory-hygiene work in a secrets-handling tool, plus org code-standard compliance. Nothing here is optional for the 1.0 tag.

No due date

100% Completed

A secret mv between vaults asks for the passphrase while holding the state directory lock

#189

by clawbot was closed 2026-10-15 10:49:07 +02:00

An unknown subcommand of vault, unlocker, version or generate prints help and exits 0

#183

by clawbot was closed 2026-10-15 06:02:53 +02:00

Log the audit fixes in TODO.md in one change

#173

by clawbot was closed 2026-10-15 17:58:59 +02:00

Listed times are in the local time zone, not UTC as AGENTS.md requires

#169

by clawbot was closed 2026-10-15 06:48:53 +02:00

A cross-vault secret mv whose source could not be removed reports "Moved" and exits 0, leaving the secret in both vaults

#159

by clawbot was closed 2026-10-15 07:31:55 +02:00

README does not say that secret add drops one trailing newline from the value while secret import keeps it

#158

by clawbot was closed 2026-10-15 05:32:04 +02:00

A wrong passphrase is reported as "no identity matched any of the recipients" with advice to make a new unlocker from the mnemonic

#157

by clawbot was closed 2026-10-14 23:48:51 +02:00

A currentvault file naming a vault that does not exist makes secret list report an empty vault with exit 0

#156

by clawbot was closed 2026-10-15 07:14:45 +02:00

secret get ignores a failed write of the value to stdout and exits 0

#155

by clawbot was closed 2026-10-15 01:32:16 +02:00

With SB_UNLOCK_PASSPHRASE set, secret unlocker add passphrase gives the new unlocker the old passphrase without asking

#154

by clawbot was closed 2026-10-15 06:02:33 +02:00

secret version promote --help says it updates the current symlink; current is a plain file

#153

by clawbot was closed 2026-10-15 02:31:47 +02:00

Commands that prompt for a mnemonic or passphrase hold the state directory lock while waiting, so other changing commands wait silently

#152

by clawbot was closed 2026-10-15 09:02:15 +02:00

secret init and secret vault create ask for the mnemonic and passphrase before refusing a vault that already exists

#151

by clawbot was closed 2026-10-15 01:32:24 +02:00

secret version list shows STATUS expired for every version that is not current, including ones with no NOT_AFTER

#150

by clawbot was closed 2026-10-15 04:48:54 +02:00

secret unlocker list --json prints "unlockers": null when the vault has no unlockers

#148

by clawbot was closed 2026-10-15 04:48:47 +02:00

secret info counts only metadata.age, so Total Size leaves out every secret value

#147

by clawbot was closed 2026-10-15 03:15:12 +02:00

A gpg failure is reported as only its exit status; gpg's reason on stderr is dropped

#146

by clawbot was closed 2026-10-15 05:31:51 +02:00

A secret larger than about half the locked-memory limit crashes secret add, import and generate secret with a panic

#145

by clawbot was closed 2026-10-15 04:02:15 +02:00

The passphrase prompt reads stdin, so secret add --force with a piped value and secret encrypt/decrypt from stdin cannot ask for the passphrase

#144

by clawbot was closed 2026-10-14 23:02:28 +02:00

secret decrypt and secret encrypt truncate the --output file before they can fail, and --input equal to --output destroys the input

#143

by clawbot was closed 2026-10-15 07:31:48 +02:00

1 2 3