jswidler / lockgit Goto Github PK
View Code? Open in Web Editor NEWA CLI tool for storing encrypted data in a git repo
License: MIT License
A CLI tool for storing encrypted data in a git repo
License: MIT License
Could you add something to the documentation that talks a bit about the encryption method you use and its security, as well as providing insight on how you'd recommend using this securely with deployments to production environments?
Thanks
when using lockgit open
, if a directory does not exist, there is an error. it should create the directory instead.
The program panics if you give it a bad key, or probably if there is a file in the vault that is corrupted / encrypted with a different key. It should provides better error messages, and protect users from accidentally using the wrong key by verifying the key on set-key through some new mechanism.
Pattern does not appear when the file is not mounted.
FILE | UPDATED | PATTERN | ID
+----------------------------+-------------+---------+----------------------------------+
keys/prod/combined.pem | unavailable | | J3uUiGGyIQuaK372dmmLkcuAvjZH0XFC
vs
FILE | UPDATED | PATTERN | ID
+----------------------------+---------+---------+----------------------------------+
keys/prod/combined.pem | false | keys/** | J3uUiGGyIQuaK372dmmLkcuAvjZH0XFC
I am very hesitant to use a tool like this that doesn't explain what is secured and how in the README.md.
How are the keys protected? What encryption is used? etc.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.