-
Notifications
You must be signed in to change notification settings - Fork 46
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Release/v1.54.0 #258
Release/v1.54.0 #258
Changes from all commits
69dc9c1
d60376e
b1653df
bb1f812
fedf1a8
e009b64
20919a1
973cf13
f4899c9
0d5726e
5f52a16
9dc0b69
2c8f9a0
1fb7e33
8e504bf
1e84488
b707ecc
b59a66e
3b22129
feafa40
17ab0d8
6e47286
48dea45
d4e225c
1ef066b
bb9ef54
d2c8a23
5ac7140
213745b
c722ea3
722a2d3
bc027f7
5aa9a30
04e9e71
c13db14
d427297
c8a8167
102d71e
edd6608
4e764e5
65b0d65
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
Original file line number | Diff line number | Diff line change | ||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
@@ -15,6 +15,13 @@ jobs: | |||||||||||||||||||||||||||
with: | ||||||||||||||||||||||||||||
go-version-file: "go.mod" | ||||||||||||||||||||||||||||
check-latest: true | ||||||||||||||||||||||||||||
- name: Install pass helper | ||||||||||||||||||||||||||||
run: sudo apt-get update && sudo apt-get install -y pass | ||||||||||||||||||||||||||||
- name: Generate GPG key | ||||||||||||||||||||||||||||
run: " | ||||||||||||||||||||||||||||
echo \"%no-protection\nKey-Type: 1\nKey-Length: 4096\nSubkey-Type: 1\nSubkey-Length: 4096\nName-Comment: keyring_test\nExpire-Date: 0\" > genkey && gpg --gen-key --batch genkey" | ||||||||||||||||||||||||||||
- name: Setup OS keystore | ||||||||||||||||||||||||||||
run: pass init keyring_test | ||||||||||||||||||||||||||||
Comment on lines
+23
to
+24
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 🛠️ Refactor suggestion Add error handling and verification for password store initialization The current implementation doesn't handle potential failures in the prerequisite GPG key setup or verify successful initialization. - - name: Setup OS keystore
- run: pass init keyring_test
+ - name: Setup OS keystore
+ run: |
+ if ! gpg --list-keys keyring_test > /dev/null 2>&1; then
+ echo "Error: GPG key 'keyring_test' not found"
+ exit 1
+ fi
+ pass init keyring_test
+ if ! pass git init > /dev/null 2>&1; then
+ echo "Error: Failed to initialize password store"
+ exit 1
+ fi 📝 Committable suggestion
Suggested change
|
||||||||||||||||||||||||||||
- name: Run test and calculate coverage | ||||||||||||||||||||||||||||
run: make coverage | ||||||||||||||||||||||||||||
- name: Upload coverage to Codecov | ||||||||||||||||||||||||||||
|
This file was deleted.
This file was deleted.
This file was deleted.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Security and maintainability improvements needed for GPG key generation
Several concerns with the current implementation:
%no-protection
flag makes the key vulnerablegenkey
file is not cleaned upConsider this more secure and maintainable approach:
📝 Committable suggestion