clawbot 4ed77902d1 Keep secret get values in locked memory (closes #37) ...

Vault.GetSecret and Vault.GetSecretVersion return the decrypted value
as a *memguard.LockedBuffer instead of copying it into an ordinary
[]byte that nothing wiped. Every caller destroys the buffer, and
`secret get` writes its bytes straight to stdout, still with no
trailing newline. Instance.Print, which formatted through fmt and had
no other callers, is removed, and so is a debug log line in
`get --version` that held the plaintext value.

Model: opus-5-5

2026-10-04 11:16:23 +02:00

..

errors.go

Refuse to create a vault that already exists (closes #74)

2026-10-04 08:25:40 +02:00

integration_test.go

Keep secret get values in locked memory (closes #37)

2026-10-04 11:16:23 +02:00

integration_version_test.go

Keep secret get values in locked memory (closes #37)

2026-10-04 11:16:23 +02:00

lock_test.go

Lock the state directory and write vault files atomically (closes #34)

2026-10-04 04:57:58 +02:00

lock.go

Lock the state directory and write vault files atomically (closes #34)

2026-10-04 04:57:58 +02:00

management.go

Refuse to create a vault that already exists (closes #74)

2026-10-04 08:25:40 +02:00

metadata_test.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

metadata.go

Lock the state directory and write vault files atomically (closes #34)

2026-10-04 04:57:58 +02:00

path_traversal_test.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

secrets_name_test.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

secrets_version_test.go

Keep secret get values in locked memory (closes #37)

2026-10-04 11:16:23 +02:00

secrets.go

Keep secret get values in locked memory (closes #37)

2026-10-04 11:16:23 +02:00

unlockers.go

Keep unlocker list working when unlocker metadata is corrupt (closes #42)

2026-10-04 06:42:14 +02:00

vault_error_test.go

Lock the state directory and write vault files atomically (closes #34)

2026-10-04 04:57:58 +02:00

vault_test.go

Keep secret get values in locked memory (closes #37)

2026-10-04 11:16:23 +02:00

vault.go

Stop vault safety checks from reading unreadable state as empty (closes #51)

2026-10-04 10:15:19 +02:00