Skip to content

GitVaulty 3.0.0

Choose a tag to compare

View all tags
@divB0 divB0 released this 19 Aug 13:19
· 40 commits to main since this release
v3.0.0
0a85bf6

GitVaulty 3.0.0 makes the GitVaulty-namespaced key-file variable the only supported master-identity file override.

Highlights

  • GITVAULTY_AGE_KEY_FILE is now the only supported master-identity file override.
  • SOPS_AGE_KEY_FILE is intentionally ignored during GitVaulty identity resolution.
  • GitVaulty continues scrubbing SOPS_AGE_KEY_FILE before invoking SOPS or wrapped commands, preventing child processes from loading an unintended private key.
  • The major-release CLI demo contract was reviewed. It already uses GITVAULTY_AGE_KEY_FILE exclusively, so the reviewed 2.0 recording remains current.

Required 2.x upgrade step

Rename the environment variable while keeping the same identity file:

export GITVAULTY_AGE_KEY_FILE=/secure/identity

The identity bytes, public recipient, signing key, repository policies, and encrypted files do not change. Existing ciphertext does not need to be re-encrypted.

Assets 2
Loading