secret

Files

sneak 7af1e6efa8 Improve PGP unlocker ergonomics

- Support 'secret unlockers add pgp [keyid]' positional argument syntax
- Automatically detect and use default GPG key when no key is specified
- Change PGP unlocker ID format from <keyid>-pgp to pgp-<keyid>
- Check if PGP key is already added before creating duplicate unlocker
- Add getDefaultGPGKey() that checks gpgconf first, then falls back to
  first secret key
- Export ResolveGPGKeyFingerprint() for use in CLI
- Add checkUnlockerExists() helper to verify unlocker IDs

The new behavior:
- 'secret unlockers add pgp' uses default GPG key
- 'secret unlockers add pgp KEYID' uses specified key
- 'secret unlockers add pgp --keyid=KEYID' also works
- Errors if key is already added or no default key exists

2025-07-21 18:57:58 +02:00

cli_test.go

fix: handle error returns from os.Unsetenv and file.Close (errcheck)

2025-07-09 06:16:13 -07:00

cli.go

fix: resolve all revive linter issues

2025-07-15 06:06:48 +02:00

crypto.go

Fix GetValue methods to return LockedBuffer internally

2025-07-15 08:59:23 +02:00

generate.go

uses protected memory buffers now for all secrets in ram