egbt/secrets
1
0
Fork 0
Code Issues Pull requests Projects Releases 13 Packages Wiki Activity Actions

13 releases 13 tags

RSS feed
  • v0.5.0.0 144ff3692b

    v0.5.0.0 — 2026-06-07 Stable

    brian released this 2026-06-07 15:34:02 -07:00 | 66 commits to main since this release

    Adds secrets verify (EGB-698) — a read-only integrity check.

    secrets verify cross-checks a project's committed .secrets.json against the store both ways (declared-but-missing blobs + orphaned blobs) and decrypt-tests every dotenv + external blob with the current key. secrets verify --all decrypt-tests every blob in every project (store-wide integrity sweep). Read-only (plaintext streamed to /dev/null); recurses the whole project tree; exits non-zero on any finding so it can gate CI and the stage-2 migrate --finalize.

    Full bats suite: 210/210. Operator security sign-off recorded.

    Downloads