Bound download expansion and escape control chars on the terminal (closes #164)
needs-review
check / check (pull_request) Successful in 1m22s
Parse the age identity key once and accept every identity in it
needs-review
check / check (pull_request) Successful in 2m29s
Validate blob hashes, offsets and lengths read from the destination
needs-review
check / check (pull_request) Successful in 2m33s
Reject a decrypted snapshot database that is not the requested one
needs-review
check / check (pull_request) Successful in 3m6s
Check blob sizes and the database in shallow verify
needs-review
check / check (pull_request) Successful in 1m21s
Add negative and boundary tests for blobgen and types (closes #170)
needs-review
check / check (pull_request) Successful in 2m20s
Remove the unused crypto path and write the blob-ID hash step once
needs-review
check / check (pull_request) Successful in 1m22s
Scrub example config of real credentials and internal hosts
needs-review
check / check (pull_request) Successful in 2m26s
Wait for the interrupted operation to clean up before exit
needs-review
check / check (pull_request) Successful in 1m22s
Give the local index and its export copy an explicit 0600 mode
needs-review
check / check (pull_request) Successful in 2m41s
Parse age_recipients at config load and never echo the entry
needs-review
check / check (pull_request) Successful in 2m18s
Open the downloaded snapshot database read-only, on a private temp dir
needs-rebase
check / check (pull_request) Successful in 1m21s
Abort the run when packing fails, even under --skip-errors
needs-review
check / check (pull_request) Successful in 2m52s
Stop config set echoing secrets; reject credential-bearing storage URLs
needs-review
check / check (pull_request) Successful in 3m31s
Reconcile purge against remote by hashed key, not human ID
needs-review
check / check (pull_request) Successful in 3m21s
Restore files at 0600 and make the blob hash check unskippable (closes #163)
needs-review
check / check (pull_request) Successful in 2m40s
Reject a blob_size_limit below the largest possible chunk (closes #167)
needs-review
check / check (pull_request) Successful in 1m20s
Fail closed on unreadable manifests instead of losing blobs
needs-review
check / check (pull_request) Successful in 2m59s
Scope the PID lock to mutating commands
needs-review
check / check (pull_request) Successful in 1m21s
Default a scheme-less s3.* endpoint to TLS
needs-rebase
check / check (pull_request) Successful in 2m35s