sneak f9ef4b64ca Make secret unlocker add pgp work on Linux (closes #88) ...

CreatePGPUnlocker got the vault's long-term key from the keychain
unlocker's helper, which on every platform but macOS is a stub that
always fails. It now calls the vault's GetOrDeriveLongTermKey, as adding
a passphrase unlocker does: from the mnemonic, checked against the
vault, or else from the current unlocker. That method joins
VaultInterface. The test GPG key gains an encryption subkey, and a new
test adds a PGP unlocker with the long-term key from the mnemonic and
from a passphrase unlocker, then reads a secret through it.

Model: opus-5-5

2026-10-04 11:41:19 +00:00

..

cli_test.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

cli.go

Keep secret get values in locked memory (closes #37)

2026-10-04 11:16:23 +02:00

completion.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

completions.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

create_vault_test.go

Keep secret get values in locked memory (closes #37)

2026-10-04 11:16:23 +02:00

crypto.go

Lock the state directory and write vault files atomically (closes #34)

2026-10-04 04:57:58 +02:00

entry_test.go

Wipe memguard buffers on every exit and restore echo (closes #35)

2026-10-04 02:07:58 +02:00

generate.go

Lock the state directory and write vault files atomically (closes #34)

2026-10-04 04:57:58 +02:00

info_helper.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

info.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

init.go

Refuse to create a vault that already exists (closes #74)

2026-10-04 08:25:40 +02:00

integration_test.go

Accept a version argument only if the secret has that version (closes #67)

2026-10-04 03:25:00 +02:00

lock_test.go

Keep secret get values in locked memory (closes #37)

2026-10-04 11:16:23 +02:00

move_test.go

Keep secret get values in locked memory (closes #37)

2026-10-04 11:16:23 +02:00

path_traversal_test.go

Speed up the internal/cli lock and two-vault tests (closes #80)

2026-10-04 08:08:04 +02:00

root.go

Print usage only for a command called wrongly (closes #41)

2026-10-04 12:08:06 +02:00

secrets_size_test.go

Keep secret get values in locked memory (closes #37)

2026-10-04 11:16:23 +02:00

secrets.go

Keep secret get values in locked memory (closes #37)

2026-10-04 11:16:23 +02:00

stdout_stderr_test.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

test_helpers.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

test_output_test.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

unlockers_add_test.go

Make secret unlocker add pgp work on Linux (closes #88)

2026-10-04 11:41:19 +00:00

unlockers_corrupt_test.go

Skip corrupt unlocker metadata in unlocker select and remove (closes #72)

2026-10-04 12:42:01 +02:00

unlockers_list_test.go

Keep unlocker list working when unlocker metadata is corrupt (closes #42)

2026-10-04 06:42:14 +02:00

unlockers.go

Leave no partial unlocker directory when adding an unlocker fails (closes #48)

2026-10-04 12:58:50 +02:00

unreadable_dir_test.go

Make secret unlocker add pgp work on Linux (closes #88)

2026-10-04 11:41:19 +00:00

usage_test.go

Print usage only for a command called wrongly (closes #41)

2026-10-04 12:08:06 +02:00

vault.go

Stop vault safety checks from reading unreadable state as empty (closes #51)

2026-10-04 10:15:19 +02:00

version_test.go

Keep secret get values in locked memory (closes #37)

2026-10-04 11:16:23 +02:00

version.go

Lock the state directory and write vault files atomically (closes #34)

2026-10-04 04:57:58 +02:00