sneak ff721a87e6 Delete .tmp- leftovers when the next command takes the lock (closes #75) ...

A command killed part-way could leave a temporary file or directory of
secret.WriteFileAtomic or secret.TempDirFor, encrypted keys included,
for good. LockStateDir now deletes them once it holds the lock, looking
only in the directories those helpers make them in (the state
directory, each vault, each secret, each version) and only at names
that start with "." and hold ".tmp-". A vault may be named ".tmp-1", so
vaults.d and the other listed directories are not searched. Commands
that only read take no lock and delete nothing. A test shows that
`unlocker remove` removes an unlocker directory with no metadata file.

Model: opus-5-5

2026-10-04 15:14:13 +00:00

..

cli_test.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

cli.go

Read secret environment variables once per command, then unset them (closes #60)

2026-10-04 16:07:57 +02:00

completion.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

completions_test.go

Check vault names in every command that takes one (closes #68)

2026-10-04 13:58:46 +02:00

completions.go

Check vault names in every command that takes one (closes #68)

2026-10-04 13:58:46 +02:00

create_vault_test.go

Read secret environment variables once per command, then unset them (closes #60)

2026-10-04 16:07:57 +02:00

crypto.go

Read secret environment variables once per command, then unset them (closes #60)

2026-10-04 16:07:57 +02:00

entry_test.go

Wipe memguard buffers on every exit and restore echo (closes #35)

2026-10-04 02:07:58 +02:00

generate.go

Read secret environment variables once per command, then unset them (closes #60)

2026-10-04 16:07:57 +02:00

info_helper.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

info.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

init.go

Read secret environment variables once per command, then unset them (closes #60)

2026-10-04 16:07:57 +02:00

integration_test.go

Give every new unlocker a directory of its own (closes #71)

2026-10-04 16:58:45 +02:00

leftovers_test.go

Delete .tmp- leftovers when the next command takes the lock (closes #75)

2026-10-04 15:14:13 +00:00

lock_test.go

Read secret environment variables once per command, then unset them (closes #60)

2026-10-04 16:07:57 +02:00

move_test.go

Read secret environment variables once per command, then unset them (closes #60)

2026-10-04 16:07:57 +02:00

path_traversal_test.go

Give every new unlocker a directory of its own (closes #71)

2026-10-04 16:58:45 +02:00

root.go

Print usage only for a command called wrongly (closes #41)

2026-10-04 12:08:06 +02:00

secrets_size_test.go

Read secret environment variables once per command, then unset them (closes #60)

2026-10-04 16:07:57 +02:00

secrets.go

Read secret environment variables once per command, then unset them (closes #60)

2026-10-04 16:07:57 +02:00

stdout_stderr_test.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

test_helpers.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

test_output_test.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

unlockers_add_test.go

Read secret environment variables once per command, then unset them (closes #60)

2026-10-04 16:07:57 +02:00

unlockers_corrupt_test.go

Delete .tmp- leftovers when the next command takes the lock (closes #75)

2026-10-04 15:14:13 +00:00

unlockers_list_test.go

Keep unlocker list working when unlocker metadata is corrupt (closes #42)

2026-10-04 06:42:14 +02:00

unlockers.go

Give every new unlocker a directory of its own (closes #71)

2026-10-04 16:58:45 +02:00

unreadable_dir_test.go

Make secret unlocker add pgp work on Linux (closes #88)

2026-10-04 14:42:01 +02:00

usage_test.go

Print usage only for a command called wrongly (closes #41)

2026-10-04 12:08:06 +02:00

vault.go

Read secret environment variables once per command, then unset them (closes #60)

2026-10-04 16:07:57 +02:00

version_test.go

Read secret environment variables once per command, then unset them (closes #60)

2026-10-04 16:07:57 +02:00

version.go

Read secret environment variables once per command, then unset them (closes #60)

2026-10-04 16:07:57 +02:00