sneak 97d039f1a4 Reject secret mv onto the same secret under another name (closes #78) ...

On a case-insensitive filesystem (the macOS default) "Foo" and "foo" name
one secret, so `secret mv --force Foo foo` removed the destination, which
was the source, and lost the secret with every version. Between vaults the
copy replaced the source, and removing the source then removed the copy.

Both kinds of move now compare the two secret directories with
os.SameFile before changing anything and reject the move if they are one,
with or without --force. The tests give one secret two names with
symbolic links on the real filesystem.

Model: opus-5-5

2026-10-04 05:09:04 +00:00

..

cli_test.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

cli.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

completion.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

completions.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

crypto.go

Lock the state directory and write vault files atomically (closes #34)

2026-10-04 04:57:58 +02:00

entry_test.go

Wipe memguard buffers on every exit and restore echo (closes #35)

2026-10-04 02:07:58 +02:00

generate.go

Lock the state directory and write vault files atomically (closes #34)

2026-10-04 04:57:58 +02:00

info_helper.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

info.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

init.go

Lock the state directory and write vault files atomically (closes #34)

2026-10-04 04:57:58 +02:00

integration_test.go

Accept a version argument only if the secret has that version (closes #67)

2026-10-04 03:25:00 +02:00

lock_test.go

Lock the state directory and write vault files atomically (closes #34)

2026-10-04 04:57:58 +02:00

move_test.go

Reject secret mv onto the same secret under another name (closes #78)

2026-10-04 05:09:04 +00:00

path_traversal_test.go

Accept a version argument only if the secret has that version (closes #67)

2026-10-04 03:25:00 +02:00

root.go

Wipe memguard buffers on every exit and restore echo (closes #35)

2026-10-04 02:07:58 +02:00

secrets_size_test.go

Let a plain docker build pass and stamp the git version (closes #57)

2026-10-02 14:16:02 +02:00

secrets.go

Reject secret mv onto the same secret under another name (closes #78)

2026-10-04 05:09:04 +00:00

stdout_stderr_test.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

test_helpers.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

test_output_test.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

unlockers_list_test.go

Keep unlocker list working when unlocker metadata is corrupt (closes #42)

2026-10-04 06:42:14 +02:00

unlockers.go

Keep unlocker list working when unlocker metadata is corrupt (closes #42)

2026-10-04 06:42:14 +02:00

vault.go

Lock the state directory and write vault files atomically (closes #34)

2026-10-04 04:57:58 +02:00

version_test.go

Accept a version argument only if the secret has that version (closes #67)

2026-10-04 03:25:00 +02:00

version.go

Lock the state directory and write vault files atomically (closes #34)

2026-10-04 04:57:58 +02:00