- Changed DecryptWithIdentity to return *memguard.LockedBuffer instead of []byte - Updated all callers throughout the codebase to handle LockedBuffer - This ensures decrypted data is protected in memory immediately after decryption - Fixed all usages in vault, secret, version, and unlocker implementations - Removed duplicate buffer creation and unnecessary memory clearing |
||
---|---|---|
.. | ||
integration_test.go | ||
integration_version_test.go | ||
management.go | ||
metadata_test.go | ||
metadata.go | ||
secrets_version_test.go | ||
secrets.go | ||
unlockers.go | ||
vault_test.go | ||
vault.go |