- Changed DecryptWithIdentity to return *memguard.LockedBuffer instead of []byte - Updated all callers throughout the codebase to handle LockedBuffer - This ensures decrypted data is protected in memory immediately after decryption - Fixed all usages in vault, secret, version, and unlocker implementations - Removed duplicate buffer creation and unnecessary memory clearing |
||
|---|---|---|
| .. | ||
| integration_test.go | ||
| integration_version_test.go | ||
| management.go | ||
| metadata_test.go | ||
| metadata.go | ||
| secrets_version_test.go | ||
| secrets.go | ||
| unlockers.go | ||
| vault_test.go | ||
| vault.go | ||