hugo/IronStorage
1
0
Fork 0
Code Issues 28 Pull Requests Actions Packages Projects Releases Wiki Activity

Enable SSH remotes in native frontends (#117)

Browse Source
This commit is contained in:
Chili Palmer
2026-08-25 21:39:35 +02:00
parent 76e707f645
commit a737e74aae
22 changed files with 1214 additions and 140 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
docs/secure-secret-storage.md
View File

@@ -49,7 +49,11 @@ caller explicitly selects `SecretCachePolicy::Timed`. Timed policies are capped
at 128 entries and 15 minutes, expire lazily, and are always cleared on lock.
The same unlocked store implements the OpenPGP `SecretProvider`, HTTPS Git
`GitCredentialProvider`, and SSH `SshPassphraseProvider`. The CLI uses it for
terminal `show` and embedded Git, proving that protected keys and remote
authentication are resolved only through opaque references. Tests inject a
memory backend and never access a developer or CI user keyring.
`GitCredentialProvider`, and SSH `SshPassphraseProvider`. CLI, TUI, and desktop
pass one prompted SSH passphrase as zeroizing bytes for one retry. Storage binds
that override to the requested key fingerprint, and the authentication handle
persists it only after the Git operation succeeds; cancellation, rejection, and
other failures never create or replace a record. Prompts are hidden or masked,
and secret values are excluded from arguments, history, normal output, debug
models, notifications, and the clipboard. Tests inject a memory backend and
never access a developer or CI user keyring.