egbt/secrets
1
0
Fork 0
Code Issues Pull requests Projects Releases 13 Packages Wiki Activity Actions

13 releases 13 tags

RSS feed
  • v0.4.0.0 fb71b956da

    v0.4.0.0 — 2026-06-07 Stable

    brian released this 2026-06-07 13:57:21 -07:00 | 72 commits to main since this release

    EGB-677 stage 1: .secrets.json manifest-driven sync.

    Added: committed .secrets.json manifest (version 2; dotenv[]/external[]/options) as the source of truth for what syncs; secrets add command; manifest-aware push (auto-add via options.autoAdd, --frozen, --dry-run, legacy .secrets-files absorb); manifest-driven pull (nested restore, restore-time path rail, empty no-op); jq gating + platform-aware install hints.

    Fixed: secrets rekey and secrets list now walk the entire project tree, so nested manifest blobs and external/ blobs survive key rotation (previously rekey could orphan nested blobs under the old key = data loss); bash 3.2 assertion correctness.

    Full bats suite: 193/193. Operator security sign-off recorded.

    Downloads