sneak 830e7d4a04 Keep secret get values in locked memory (closes #37) ...

Vault.GetSecret and Vault.GetSecretVersion return the decrypted value
as a *memguard.LockedBuffer instead of copying it into an ordinary
[]byte that nothing wiped. Every caller destroys the buffer, and
`secret get` writes its bytes straight to stdout, still with no
trailing newline. Instance.Print, which formatted through fmt and had
no other callers, is removed, and so is a debug log line in
`get --version` that held the plaintext value.

Model: opus-5-5

2026-10-04 07:49:21 +00:00

..

cli_test.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

cli.go

Keep secret get values in locked memory (closes #37)

2026-10-04 07:49:21 +00:00

completion.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

completions.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

create_vault_test.go

Keep secret get values in locked memory (closes #37)

2026-10-04 07:49:21 +00:00

crypto.go

Lock the state directory and write vault files atomically (closes #34)

2026-10-04 04:57:58 +02:00

entry_test.go

Wipe memguard buffers on every exit and restore echo (closes #35)

2026-10-04 02:07:58 +02:00

generate.go

Lock the state directory and write vault files atomically (closes #34)

2026-10-04 04:57:58 +02:00

info_helper.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

info.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

init.go

Refuse to create a vault that already exists (closes #74)

2026-10-04 08:25:40 +02:00

integration_test.go

Accept a version argument only if the secret has that version (closes #67)

2026-10-04 03:25:00 +02:00

lock_test.go

Keep secret get values in locked memory (closes #37)

2026-10-04 07:49:21 +00:00

move_test.go

Keep secret get values in locked memory (closes #37)

2026-10-04 07:49:21 +00:00

path_traversal_test.go

Speed up the internal/cli lock and two-vault tests (closes #80)

2026-10-04 08:08:04 +02:00

root.go

Wipe memguard buffers on every exit and restore echo (closes #35)

2026-10-04 02:07:58 +02:00

secrets_size_test.go

Keep secret get values in locked memory (closes #37)

2026-10-04 07:49:21 +00:00

secrets.go

Keep secret get values in locked memory (closes #37)

2026-10-04 07:49:21 +00:00

stdout_stderr_test.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

test_helpers.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

test_output_test.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

unlockers_list_test.go

Keep unlocker list working when unlocker metadata is corrupt (closes #42)

2026-10-04 06:42:14 +02:00

unlockers.go

Keep unlocker list working when unlocker metadata is corrupt (closes #42)

2026-10-04 06:42:14 +02:00

vault.go

Refuse to create a vault that already exists (closes #74)

2026-10-04 08:25:40 +02:00

version_test.go

Keep secret get values in locked memory (closes #37)

2026-10-04 07:49:21 +00:00

version.go

Lock the state directory and write vault files atomically (closes #34)

2026-10-04 04:57:58 +02:00